Pre-defined roles

Snyk provides a set of standard user roles that can be assigned and managed using the Snyk Web UI or the Snyk API. The permission sets for pre-defined roles cannot be customized. Instead, Snyk recommends creating a custom role under Manage role in the Snyk Web UI.

The pre-defined roles Snyk provides are as follows:

Organization Admin: the standard role equivalent for Team Leads. Users with this role can add and delete Projects, override Snyk checks, and provision Group members with an Organization-level role.
Organization Collaborator: the standard role equivalent for Developers. This role is ideal for small teams or a developer-first organizational approach.
Group Admin: the standard role equivalent for the person in your company who oversees Snyk use at a high level, providing a full set of permissions at the Group and Organization level. This also means that a Group Admin is automatically an Organization Admin to all Organizations that sit under the Group, although they will not be visible in an Organization level list.
Group Viewer: a user who can access the Group level but requires Organization-level permissions to take actions in Snyk. This is normally used as a starting point during onboarding with Snyk to understand functions tied to Group permissions and design a custom Group role for post-deployment use.
Group Member: a non-functional user role added to your environment as a transition from Group Viewer if you do not yet wish to create a custom role after onboarding with Snyk. This means the permissions granted can vary depending on your requirements, as discussed with your Snyk contacts. Select the named role from the list under Manage Members in the Snyk Web UI to check the permissions assigned to your Group Member role.

Feature availability

Group-level roles are available only to Enterprise customers. See the Plans and pricing page for details.

Role types

Roles can be managed at both the Organization level and the Group level.

Group-level roles contain permissions at both the Organization and the Group levels. Any Organization permissions added to a Group role will be granted to all Organizations in the Group. For example, the pre-defined Group role Group Viewer grants users a selection of view permissions on the Group, and also a selection of Organization-level viewer permissions to grant users who have that role read-only access to all Organizations in the Group.

Organization roles contain only permissions at the Organization level. Organization roles are useful for granting specific permissions for a selection of organizations.

You can use a combination of Organization and Group-level roles to grant specific access across your all roles. For example, if you want a user to have Organization Admin access to a particular Organization, but have read-only access to the rest of the Organizations in the Group, you can grant that user the Group Viewer role at the Group level and the Organization Admin role for the Organization you choose.

Organization-level permissions

This table details the Organization-level permissions that apply to each pre-defined role.

Org Admin

Org Collaborator

Group Admin

Group Viewer

View Organization

Edit Organization

Remove Organization

View Organization Reports

View Project

Add Project

Edit Project

Project Status

Test Project

Move Project

Remove Project

View Project History

Edit Project Integrations

Edit Project Attributes

View Jira Issues

Create Jira Issues

Edit Project Tags

View Project Ignores

Create Project Ignores

Edit Project Ignores

Remove Project Ignores

Create Pull Requests

Mark Pull Request checks as successful

View Collections

Create Collections

Edit Collections

Delete Collections

View Service Accounts

Create Service Accounts

Edit Service Accounts

Remove Service Accounts

View Users

Invite Users

Manage Users

Add Users

Provision Users

User Leave

User Remove

View Integrations

Edit Integrations

Test Packages

View Billing

Edit Billing

View Entitlements

View Preview Features

Edit Preview Features

View Audit Logs

View Outbound Webhooks

Create Outbound Webhooks

Remove Outbound Webhooks

View Apps

Install Apps

Create Apps

Edit Apps

Delete Apps

View Environments

Create Environments

Delete Environments

Update Environments