Auditor role template
This is a Group-level read-only role, meaning an Auditor can only view certain areas and functions in Snyk and cannot create PRs, Projects, and more.
This role can view issues, results of scans, and reports. An Auditor often verifies that there is a scan snapshot for a particular resource or Snyk Project. The Auditor may be external to the company.
Group-level permissions
To create this role, enable the following permissions in the relevant categories:
Group Management
Permission | Enabled? |
---|---|
View Groups | |
Edit Group details | |
View Group settings | |
Edit settings | |
View Group notification settings | |
Edit Group notification settings |
Organization management
Permission | Enabled? |
---|---|
View Organizations | |
Edit Organizations | |
Remove Organizations |
AppRisk management
Permission | Enabled? |
---|---|
View AppRisk | |
Edit AppRisk |
Audit Log management
Permission | Enabled? |
---|---|
View Audit Logs |
Insights management
Permission | Enabled? |
---|---|
Access Insights |
Reports management
Permission | Enabled? |
---|---|
View reports |
Security and License Policies
Permission | Enabled? |
---|---|
View Policies | |
Create Policies | |
Edit Policies | |
Delete Policies |
User management
Permission | Enabled? |
---|---|
View users | |
Invite users | |
Manage users | |
Add users | |
Provision users | |
User Leave | |
User Remove |
The remaining categories of permissions listed below should have all permissions within them set to disabled:
IaC settings management
Issue management
Request access management
Role management
Service account management
Snyk Apps management
Snyk Preview management
SSO settings management
Tags management
Organization-level permissions
To create this role, enable the following permissions in the relevant categories:
Organization management
Permission | Enabled? |
---|---|
View Organization | |
Edit Organization | |
Remove Organization |
Audit Log management
Permission | Enabled? |
---|---|
View audit logs |
Collection management
Permission | Enabled? |
---|---|
View Collections | |
Create Collection | |
Edit Collections | |
Delete Collections |
Container Image management
Permission | Enabled? |
---|---|
View container image | |
Create container image | |
Edit container image |
Integration management
Permission | Enabled? |
---|---|
View integrations | |
Edit integrations |
Project management
Permission | Enabled? |
---|---|
View Project | |
Add Project | |
Edit Project | |
Edit Project status | |
Test Project | |