Gitlab permission and role cheat sheet
快速查阅Gitlab的Role权限范围
| Action | Guest | Reporter | Developer | Maintainer | Owner |
|---|---|---|---|---|---|
| Analytics: View issue analytics | ✓ | ✓ | ✓ | ✓ | ✓ |
| Analytics: View merge request analytics | ✓ | ✓ | ✓ | ✓ | ✓ |
| Analytics: View value stream analytics | ✓ | ✓ | ✓ | ✓ | ✓ |
| Analytics: View DORA metrics | ✓ | ✓ | ✓ | ✓ | |
| Analytics: View CI/CD analytics | ✓ | ✓ | ✓ | ✓ | |
| Analytics: View code review analytics | ✓ | ✓ | ✓ | ✓ | |
| Analytics: View repository analytics | ✓ | ✓ | ✓ | ✓ | |
| Application security: View licenses in dependency list | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| Application security: Create and run on-demand DAST scans | ✓ | ✓ | ✓ | ||
| Application security: Manage security policy | ✓ | ✓ | ✓ | ||
| Application security: View dependency list | ✓ | ✓ | ✓ | ||
| Application security: Create a CVE ID Request | ✓ | ✓ | |||
| Application security: Create or assign security policy project | ✓ | ||||
| Clusters: View clusters | ✓ | ✓ | ✓ | ||
| Clusters: Manage clusters | ✓ | ✓ | |||
| Container Registry: Create, edit, delete cleanup policies | ✓ | ✓ | |||
| Container Registry: Push an image to the Container Registry | ✓ | ✓ | ✓ | ||
| Container Registry: Pull an image from the Container Registry | ✓ (20) | ✓ (20) | ✓ | ✓ | ✓ |
| Container Registry: Remove a Container Registry image | ✓ | ✓ | ✓ | ||
| GitLab Pages: View Pages protected by access control | ✓ | ✓ | ✓ | ✓ | ✓ |
| GitLab Pages: Manage | ✓ | ✓ | |||
| GitLab Pages: Manage GitLab Pages domains and certificates | ✓ | ✓ | |||
| GitLab Pages: Remove GitLab Pages | ✓ | ✓ | |||
| Incident Management: View alerts | ✓ | ✓ | ✓ | ✓ | |
| Incident Management: Assign an alert | ✓ | ✓ | ✓ | ✓ | ✓ |
| Incident Management: View incident | ✓ | ✓ | ✓ | ✓ | ✓ |
| Incident Management: Create incident | (16) | ✓ | ✓ | ✓ | ✓ |
| Incident Management: View on-call schedules | ✓ | ✓ | ✓ | ✓ | |
| Incident Management: Participate in on-call rotation | ✓ | ✓ | ✓ | ✓ | ✓ |
| Incident Management: View escalation policies | ✓ | ✓ | ✓ | ✓ | |
| Incident Management: Manage on-call schedules | ✓ | ✓ | |||
| Incident Management: Manage escalation policies | ✓ | ✓ | |||
| Issues: Add Labels | ✓ (15) | ✓ | ✓ | ✓ | ✓ |
| Issues: Assign | ✓ (15) | ✓ | ✓ | ✓ | ✓ |
| Issues: Create (18) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Issues: Create confidential issues | ✓ | ✓ | ✓ | ✓ | ✓ |
| Issues: View Design Management pages | ✓ | ✓ | ✓ | ✓ | ✓ |
| Issues: View related issues | ✓ | ✓ | ✓ | ✓ | ✓ |
| Issues: Set weight | ✓ (15) | ✓ | ✓ | ✓ | ✓ |
| Issues: View confidential issues | (2) | ✓ | ✓ | ✓ | ✓ |
| Issues: Close / reopen (19) | ✓ | ✓ | ✓ | ✓ | |
| Issues: Lock threads | ✓ | ✓ | ✓ | ✓ | |
| Issues: Manage related issues | ✓ | ✓ | ✓ | ✓ | |
| Issues: Manage tracker | ✓ | ✓ | ✓ | ✓ | |
| Issues: Move issues (14) | ✓ | ✓ | ✓ | ✓ | |
| Issues: Set issue time tracking estimate and time spent | ✓ | ✓ | ✓ | ✓ | |
| Issues: Archive Design Management files | ✓ | ✓ | ✓ | ||
| Issues: Upload Design Management files | ✓ | ✓ | ✓ | ||
| Issues: Delete | ✓ | ||||
| License Compliance: View allowed and denied licenses | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| License Compliance: View License Compliance reports | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| License Compliance: View License list | ✓ | ✓ | ✓ | ✓ | |
| License Compliance: Manage license policy | ✓ | ✓ | |||
| Merge requests: Assign reviewer | ✓ | ✓ | ✓ | ✓ | |
| Merge requests: See list | ✓ | ✓ | ✓ | ✓ | |
| Merge requests: Apply code change suggestions | ✓ | ✓ | ✓ | ||
| Merge requests: Approve (8) | ✓ | ✓ | ✓ | ||
| Merge requests: Assign | ✓ | ✓ | ✓ | ||
| Merge requests: Create (17) | ✓ | ✓ | ✓ | ||
| Merge requests: Add labels | ✓ | ✓ | ✓ | ||
| Merge requests: Lock threads | ✓ | ✓ | ✓ | ||
| Merge requests: Manage or accept | ✓ | ✓ | ✓ | ||
| Merge requests: Resolve a thread | ✓ | ✓ | ✓ | ||
| Merge requests: Manage merge approval rules (project settings) | ✓ | ✓ | |||
| Merge requests: Delete | ✓ | ||||
| Metrics dashboards: Manage user-starred metrics dashboards (6) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Metrics dashboards: View metrics dashboard annotations | ✓ | ✓ | ✓ | ✓ | |
| Metrics dashboards: Create/edit/delete metrics dashboard annotations | ✓ | ✓ | ✓ | ||
| Package registry: Pull a package | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| Package registry: Publish a package | ✓ | ✓ | ✓ | ||
| Package registry: Delete a package | ✓ | ✓ | |||
| Package registry: Delete a file associated with a package | ✓ | ✓ | |||
| Project operations: View Error Tracking list | ✓ | ✓ | ✓ | ✓ | |
| Project operations: Manage Feature Flags | ✓ | ✓ | ✓ | ||
| Project operations: Manage Error Tracking | ✓ | ✓ | |||
| Projects: Download project | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| Projects: Leave comments | ✓ | ✓ | ✓ | ✓ | ✓ |
| Projects: Reposition comments on images (posted by any user) | ✓ (9) | ✓ (9) | ✓ (9) | ✓ | ✓ |
| Projects: View Insights | ✓ | ✓ | ✓ | ✓ | ✓ |
| Projects: View releases | ✓ (5) | ✓ | ✓ | ✓ | ✓ |
| Projects: View Requirements | ✓ | ✓ | ✓ | ✓ | ✓ |
| Projects: View time tracking reports | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| Projects: View wiki pages | ✓ | ✓ | ✓ | ✓ | ✓ |
| Projects: Create snippets | ✓ | ✓ | ✓ | ✓ | |
| Projects: Manage labels | ✓ | ✓ | ✓ | ✓ | |
| Projects: View project traffic statistics | ✓ | ✓ | ✓ | ✓ | |
| Projects: Create, edit, delete milestones. | ✓ | ✓ | ✓ | ✓ | |
| Projects: Create, edit, delete releases | ✓ (12) | ✓ (12) | ✓ (12) | ||
| Projects: Create, edit wiki pages | ✓ | ✓ | ✓ | ||
| Projects: Enable Review Apps | ✓ | ✓ | ✓ | ||
| Projects: View project Audit Events | ✓ (10) | ✓ | ✓ | ||
| Projects: Add deploy keys | ✓ | ✓ | |||
| Projects: Add new team members | ✓ | ✓ | |||
| Projects: Manage team members | ✓ (21) | ✓ | |||
| Projects: Change project features visibility level | ✓ (13) | ✓ | |||
| Projects: Configure webhooks | ✓ | ✓ | |||
| Projects: Delete wiki pages | ✓ | ✓ | ✓ | ||
| Projects: Edit comments (posted by any user) | ✓ | ✓ | |||
| Projects: Edit project badges | ✓ | ✓ | |||
| Projects: Edit project settings | ✓ | ✓ | |||
| Projects: Export project | ✓ | ✓ | |||
| Projects: Manage project access tokens (11) | ✓ (21) | ✓ | |||
| Projects: Manage Project Operations | ✓ | ✓ | |||
| Projects: Rename project | ✓ | ✓ | |||
| Projects: Share (invite) projects with groups | ✓ (7) | ✓ (7) | |||
| Projects: View 2FA status of members | ✓ | ✓ | |||
| Projects: Assign project to a compliance framework | ✓ | ||||
| Projects: Archive project | ✓ | ||||
| Projects: Change project visibility level | ✓ | ||||
| Projects: Delete project | ✓ | ||||
| Projects: Disable notification emails | ✓ | ||||
| Projects: Transfer project to another namespace | ✓ | ||||
| Projects: View Usage Quotas page | ✓ | ✓ | |||
| Repository: Pull project code | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| Repository: View project code | ✓ (1) | ✓ | ✓ | ✓ | ✓ |
| Repository: View a commit status | ✓ | ✓ | ✓ | ✓ | |
| Repository: Add tags | ✓ | ✓ | ✓ | ||
| Repository: Create new branches | ✓ | ✓ | ✓ | ||
| Repository: Create or update commit status | ✓ (4) | ✓ | ✓ | ||
| Repository: Force push to non-protected branches | ✓ | ✓ | ✓ | ||
| Repository: Push to non-protected branches | ✓ | ✓ | ✓ | ||
| Repository: Remove non-protected branches | ✓ | ✓ | ✓ | ||
| Repository: Rewrite or remove Git tags | ✓ | ✓ | ✓ | ||
| Repository: Enable or disable branch protection | ✓ | ✓ | |||
| Repository: Enable or disable tag protection | ✓ | ✓ | |||
| Repository: Manage push rules | ✓ | ✓ | |||
| Repository: Push to protected branches (4) | ✓ | ✓ | |||
| Repository: Turn on or off protected branch push for developers | ✓ | ✓ | |||
| Repository: Remove fork relationship | ✓ | ||||
| Repository: Force push to protected branches (3) | |||||
| Repository: Remove protected branches (3) | |||||
| Requirements Management: Archive / reopen | ✓ | ✓ | ✓ | ✓ | |
| Requirements Management: Create / edit | ✓ | ✓ | ✓ | ✓ | |
| Requirements Management: Import / export | ✓ | ✓ | ✓ | ✓ | |
| Security dashboard: Create issue from vulnerability finding | ✓ | ✓ | ✓ | ||
| Security dashboard: Create vulnerability from vulnerability finding | ✓ | ✓ | ✓ | ||
| Security dashboard: Dismiss vulnerability | ✓ | ✓ | ✓ | ||
| Security dashboard: Dismiss vulnerability finding | ✓ | ✓ | ✓ | ||
| Security dashboard: Resolve vulnerability | ✓ | ✓ | ✓ | ||
| Security dashboard: Revert vulnerability to detected state | ✓ | ✓ | ✓ | ||
| Security dashboard: Use security dashboard | ✓ | ✓ | ✓ | ||
| Security dashboard: View vulnerability | ✓ | ✓ | ✓ | ||
| Security dashboard: View vulnerability findings in dependency list | ✓ | ✓ | ✓ | ||
| Terraform: Read Terraform state | ✓ | ✓ | ✓ | ||
| Terraform: Manage Terraform state | ✓ | ✓ | |||
| Test cases: Archive | ✓ | ✓ | ✓ | ✓ | |
| Test cases: Create | ✓ | ✓ | ✓ | ✓ | |
| Test cases: Move | ✓ | ✓ | ✓ | ✓ | |
| Test cases: Reopen | ✓ | ✓ | ✓ | ✓ |