Roles and Permissions

SAM provides four out of the box roles which map to the 3 different personas that SAM provides capabilities for and then a Admin user.

Admin Role – The Admin Role is a super user who has access to all of SAM's system roles and privileges.
Application Developer Role – The Application Developer Role has the privileges necessary to create and submit applications.
Operations Role – The Operations Role has the privileges necessary to create service pools and environments and to submit applications.
Analyst Role – The Analyst Role has access to specific applications and dashboards.

A role provides permissions (Read,Write, Execute) to 5 different resources in SAM:

Table 1. Role and Permission Matrix
Resources	Admin Role Access	Application Developer Role Access	Operations Role Access	Analyst Role Access
Streamline Resources
User Mgmt	All Access	No Access	No Access	No Access
Role Mgmt	All Access	No Access	No Access	No Access
Topology	All Access	U: R W X	All: R W X	No Access
Customer Processor	All Access	U: R W	All: R W	No Access
Service Pools	All Access	All: R	All: R W	No Access
Environments	All Access	U: R W	All: R W	No Access
System Artifacts: Notifier UDF UDAF Component Defs	All Access (includes edit access to component defs)	Read to All	Read to All	No Access
Custom Artifacts: Notifier UDF UDAF	All Access	U: R, W	All: R W	No Access
Dashboards				Has LInk to Menu
Schema Registry Resources
Schemas		All: R W	All: R W	All: -
Model Registry Resources
Models	All: R	U: R W O: R