[Yandex Cloud documentation](../../index.md) > [Yandex MetaData Hub](../index.md) > Data Catalog > Service roles for access management

# Service roles to manage metadata in Yandex Data Catalog



{% note info %}

This feature is in the [Preview](../../overview/concepts/launch-stages.md) stage.

{% endnote %}



To view information about metadata catalogs and manage their resources, you can use Yandex Data Catalog service roles at the following levels:

* [Service](#service-level-roles)
* [Catalog](#catalogs-roles)
* [Metadata set](#assets-roles)
* [Classification](#classifications-roles)
* [Classification tag](#tags-roles)
* [Domain](#domains-roles)
* [Glossary](#glossaries-roles)
* [Glossary term](#terms-roles)
* [Ingestion](#ingestions-roles)
* [Ingestion source](#ingestions-roles)
* [Metadata link](#lineages-roles)

## Top-level service roles {#service-level-roles}

```mermaid
%%{
  init: {
    "flowchart": { "defaultRenderer": "elk" },
    "elk": { "nodePlacementStrategy": "NETWORK_SIMPLEX" }
  }
}%%
flowchart BT
    data-catalog.user --> data-catalog.dataConsumer
    data-catalog.viewer --> data-catalog.dataConsumer
    data-catalog.dataConsumer --> data-catalog.dataSteward
    data-catalog.auditor --> data-catalog.viewer
    data-catalog.viewer --> data-catalog.editor
    data-catalog.editor --> data-catalog.admin    
```

### data-catalog.auditor {#data-catalog-auditor}

The `data-catalog.auditor` role enables viewing info on Data Catalogs resources and quotes.

Users with this role can:
* View info on catalogs in Data Catalog and [access permissions](../../iam/concepts/access-control/index.md) granted for them.
* View info on [domains](../../iam/concepts/access-control/index.md)in Data Catalog and access permissions granted for them.
* View info on [sources and downloads](../../iam/concepts/access-control/index.md) in Data Catalog.
* View info on data and data links in Data Catalog.
* View info on [glossaries and terms](../concepts/data-catalog.md#glossaries-and-terms) links in Data Catalog.
* View info on [classifications and tags](../concepts/data-catalog.md#glossaries-and-terms) links in Data Catalog.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.auditor`, `data-catalog.domains.auditor`, `data-catalog.ingestionSources.auditor`, `data-catalog.ingestions.auditor`, `data-catalog.assets.auditor`, `data-catalog.lineages.auditor`, `data-catalog.glossaries.auditor`, `data-catalog.glossaryTerms.auditor`, `data-catalog.classifications.auditor`, and `data-catalog.classificationTags.auditor` permissions.

### data-catalog.viewer {#data-catalog-viewer}

The `data-catalog.viewer` role enables viewing info on Data Catalogs resources and quotes.

Users with this role can:
* View info on catalogs in Data Catalog and [access permissions](../../iam/concepts/access-control/index.md) granted for them.
* View info on [domains](../../iam/concepts/access-control/index.md)in Data Catalog and access permissions granted for them.
* View info on [sources and downloads](../../iam/concepts/access-control/index.md) in Data Catalog.
* View info on data and data links in Data Catalog.
* View info on [glossaries and terms](../concepts/data-catalog.md#glossaries-and-terms) links in Data Catalog.
* View info on [classifications and tags](../concepts/data-catalog.md#glossaries-and-terms) links in Data Catalog.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.auditor` permissions.

### data-catalog.editor {#data-catalog-editor}

The `data-catalog.editor` role enables managing Data Catalog resources.

Users with this role can:
* View info on catalogs in Data Catalog and [access permissions](../../iam/concepts/access-control/index.md) granted for them as well as create, modify, and delete such catalogs.
* View info on [domains](../../iam/concepts/access-control/index.md) in Data Catalog and access permissions granted for them as well as create, use, modify, and delete such catalogs.
* View info on [sources](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, modify, and delete them.
* View info on [downloads](../concepts/data-catalog.md#metadata-upload) in Data Catalog as well as create, modify, and delete them.
* View info on data in Data Catalog as well as create, modify, and delete such data.
* View info on data links in Data Catalog as well as create, modify, and delete them.
* View info on [glossaries](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, modify, and delete them.
* View info on [terms](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, use, modify, and delete them.
* View info on [classifications](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, modify, and delete them.
* View info on [tags](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, use, modify, and delete them.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.editor`, `data-catalog.domains.editor`, `data-catalog.ingestionSources.editor`, `data-catalog.ingestions.editor`, `data-catalog.assets.editor`, `data-catalog.lineages.editor`, `data-catalog.glossaries.editor`, `data-catalog.glossaryTerms.editor`, `data-catalog.classifications.editor`, and `data-catalog.classificationTags.editor` permissions.

### data-catalog.admin {#data-catalog-admin}

The `data-catalog.admin` role enables managing Data Catalog resources and access to them.

Users with this role can:
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted for catalogs in Data Catalog and modify such permissions.
* View info on catalogs in Data Catalog as well as create, modify, and delete them.
* View info on access permissions granted for domains in Data Catalog and modify such permissions.
* View info on [domains](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, use, modify, and delete them.
* View info on [sources](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, modify, and delete them.
* View info on [downloads](../../iam/concepts/access-control/index.md) in Data Catalog as well as start, stop, modify, and delete them.
* View info on data in Data Catalog as well as create, modify, and delete such data.
* View info on data links in Data Catalog as well as create, modify, and delete them.
* View info on [glossaries](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, modify, and delete them.
* View info on [terms](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, use, modify, and delete them.
* View info on [classifications](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, modify, and delete them.
* View info on [tags](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, use, modify, and delete them.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.admin`, `data-catalog.domains.admin`, `data-catalog.ingestionSources.admin`, `data-catalog.ingestions.admin`, `data-catalog.assets.admin`, `data-catalog.lineages.admin`, `data-catalog.glossaries.admin`, `data-catalog.glossaryTerms.admin`, `data-catalog.classifications.admin`, and `data-catalog.classificationTags.admin` permissions.

### data-catalog.dataSteward {#data-catalog-dataSteward}

The `data-catalog.dataSteward` role enables viewing info on Data Catalogs resources, using and modifying such resources, and managing Data Catalog downloads.

Users with this role can:
* View info on catalogs in Data Catalog and [access permissions](../../iam/concepts/access-control/index.md) granted for them.
* View info on [domains](../concepts/data-catalog.md#domains-and-subdomains) in Data Catalog and access permissions granted for them, as well as use and modify such domains.
* View info on [sources](../concepts/data-catalog.md#metadata-upload) in Data Catalog and modify them.
* View info on [downloads](../concepts/data-catalog.md#metadata-upload) in Data Catalog as well as start, stop, and modify them.
* View info on data and data links in Data Catalog as well as modify such data and data links.
* View info on [glossaries](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and modify them.
* View info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as use and modify them.
* View info on [classifications](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and modify them.
* View info on [tags](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as use and modify them.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.dataConsumer` permissions.

### data-catalog.dataConsumer {#data-catalog-dataConsumer}

The `data-catalog.dataConsumer` role enables viewing info on Data Catalogs resources as well as using and modifying them.

This role does not enable modifying sources or managing Data Catalog downloads.

Users with this role can:
* View info on catalogs in Data Catalog and [access permissions](../../iam/concepts/access-control/index.md) granted for them.
* View info on [domains](../concepts/data-catalog.md#domains-and-subdomains) in Data Catalog and access permissions granted for them, as well as use and modify such domains.
* View info on [sources and downloads](../../iam/concepts/access-control/index.md) in Data Catalog.
* View info on data and data links in Data Catalog as well as modify such data and data links.
* View info on [glossaries](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and modify them.
* View info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as use and modify them.
* View info on [classifications](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and modify them.
* View info on [tags](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as use and modify them.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.viewer` and `data-catalog.user` permissions.

### data-catalog.user {#data-catalog-user}

The `data-catalog.user` role enables viewing info on [domains](../concepts/data-catalog.md#classifications-and-tags), [tags](../concepts/data-catalog.md#classifications-and-tags), and [terms](../concepts/data-catalog.md#classifications-and-tags) in Data Catalog as well as using such domains, tags, and terms.

This role includes the `data-catalog.domains.user`, `data-catalog.classificationTags.user`, and `data-catalog.glossaryTerms.user` permissions.

## Roles for catalog access management {#catalogs-roles}

### data-catalog.catalogs.auditor {#data-catalog-catalogs-auditor}

The `data-catalog.catalogs.auditor` role enables viewing info on catalogs in Data Catalog, [access permissions](../../iam/concepts/access-control/index.md) granted for them, and the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

### data-catalog.catalogs.viewer {#data-catalog-catalogs-viewer}

The `data-catalog.catalogs.viewer` role enables viewing info on catalogs in Data Catalog, [access permissions](../../iam/concepts/access-control/index.md) granted for them, and the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.auditor` permissions.

### data-catalog.catalogs.editor {#data-catalog-catalogs-editor}

The `data-catalog.catalogs.editor` role enables viewing info on catalogs in Data Catalog and managing them.

Users with this role can:
* View info on catalogs in Data Catalog as well as create, modify, and delete them.
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted to catalogs in Data Catalog.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.viewer` permissions.

### data-catalog.catalogs.admin {#data-catalog-catalogs-admin}

The `data-catalog.catalogs.admin` role enables managing catalogs and access to them in Data Catalog.

Users with this role can:
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted for catalogs in Data Catalog and modify such permissions.
* View info on catalogs in Data Catalog as well as create, modify, and delete them.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.editor` permissions.

## Roles for metadata set access management {#assets-roles}

### data-catalog.assets.auditor {#data-catalog-assets-auditor}

The `data-catalog.assets.auditor` role enables viewing info on data in Data Catalog.

### data-catalog.assets.viewer {#data-catalog-assets-viewer}

The `data-catalog.catalogs.viewer` role enables viewing info on catalogs in Data Catalog, [access permissions](../../iam/concepts/access-control/index.md) granted for them, and the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.auditor` permissions.

### data-catalog.assets.editor {#data-catalog-assets-editor}

The `data-catalog.assets.editor` role enables viewing info on data in Data Catalog as well as creating, modifying, and deleting such data.

This role includes the `data-catalog.assets.viewer` permissions.

### data-catalog.assets.admin {#data-catalog-assets-admin}

The `data-catalog.catalogs.admin` role enables managing catalogs and access to them in Data Catalog.

Users with this role can:
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted for catalogs in Data Catalog and modify such permissions.
* View info on catalogs in Data Catalog as well as create, modify, and delete them.
* View info on the Data Catalog [quotes](../concepts/limits.md#data-catalog-quota).

This role includes the `data-catalog.catalogs.editor` permissions.

## Roles for classification access management {#classifications-roles}

### data-catalog.classifications.auditor {#data-catalog-classifications-auditor}

The `data-catalog.classifications.auditor` role enables viewing info on [classifications](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

### data-catalog.classifications.viewer {#data-catalog-classifications-viewer}

The `data-catalog.classifications.viewer` role enables viewing info on [classifications](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

This role includes the `data-catalog.classifications.auditor` permissions.

### data-catalog.classifications.editor {#data-catalog-classifications-editor}

The `data-catalog.classifications.editor` role enables viewing info on [classifications](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.classifications.viewer` permissions.

### data-catalog.classifications.admin {#data-catalog-classifications-admin}

The `data-catalog.classifications.admin` role enables viewing info on [classifications](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.classifications.editor` permissions.

## Roles for classification tag access management {#tags-roles}

### data-catalog.classificationsTags.auditor {#data-catalog-classificationTags-auditor}

The `data-catalog.classificationTags.auditor` role enables viewing info on [tags](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

### data-catalog.classificationsTags.viewer {#data-catalog-classificationTags-viewer}

The `data-catalog.classificationTags.viewer` role enables viewing info on [tags](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

This role includes the `data-catalog.classificationTags.auditor` permissions.

### data-catalog.classificationsTags.user {#data-catalog-classificationTags-user}

The `data-catalog.classificationTags.user` role enables viewing info on [tags](../concepts/data-catalog.md#classifications-and-tags) in Data Catalog and using them.

### data-catalog.classificationsTags.editor {#data-catalog-classificationTags-editor}

The `data-catalog.classificationTags.editor` role enables viewing info on [tags](../../iam/concepts/access-control/index.md) in Data Catalog as well as creating, using, modifying, and deleting them.

This role includes the `data-catalog.classificationTags.viewer` and `data-catalog.classificationTags.user` permissions.

### data-catalog.classificationsTags.admin {#data-catalog-classificationTags-admin}

The `data-catalog.classificationTags.admin` role enables viewing info on [tags](../../iam/concepts/access-control/index.md) in Data Catalog as well as creating, using, modifying, and deleting them.

This role includes the `data-catalog.classificationTags.editor` permissions.

## Roles for domain access management {#domains-roles}

### data-catalog.domains.auditor {#data-catalog-domains-auditor}

The `data-catalog.domains.auditor` role enables viewing info on [domains](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and on [access permissions](../concepts/data-catalog.md#glossaries-and-terms) granted for them.

### data-catalog.domains.viewer {#data-catalog-domains-viewer}

The `data-catalog.domains.viewer` role enables viewing info on [domains](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and on [access permissions](../concepts/data-catalog.md#glossaries-and-terms) granted for them.

This role includes the `data-catalog.domains.auditor` permissions.

### data-catalog.domains.user {#data-catalog-domains-user}

The `data-catalog.domains.user` role enables viewing info on [domains](../concepts/data-catalog.md#domains-and-subdomains) in Data Catalog and using them.

### data-catalog.domains.editor {#data-catalog-domains-editor}

The `data-catalog.domains.editor` role enables viewing info on domains in Data Catalog and managing them.

Users with this role can:
* View info on [domains](../../iam/concepts/access-control/index.md) in Data Catalog as well as creating, using, modifying, and deleting them.
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted for domains in Data Catalog.

This role includes the `data-catalog.domains.viewer` and `data-catalog.domains.user` permissions.

### data-catalog.domains.admin {#data-catalog-domains-admin}

The `data-catalog.domains.admin` role enables managing domains and access to them in Data Catalog.

Users with this role can:
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted for domains in Data Catalog and modify such permissions.
* View info on [domains](../../iam/concepts/access-control/index.md) in Data Catalog as well as create, use, modify, and delete them.

This role includes the `data-catalog.domains.editor` permissions.

## Roles for dictionary access management {#glossaries-roles}

### data-catalog.glossaries.auditor {#data-catalog-glossaries-auditor}

The `data-catalog.glossaries.auditor` role enables viewing info on [glossaries](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

### data-catalog.glossaries.viewer {#data-catalog-glossaries-viewer}

The `data-catalog.glossaries.viewer` role enables viewing info on [glossaries](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

This role includes the `data-catalog.glossaries.auditor` permissions.

### data-catalog.glossaries.editor {#data-catalog-glossaries-editor}

The `data-catalog.glossaries.editor` role enables viewing info on [glossaries](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.glossaries.viewer` permissions.

### data-catalog.glossaries.admin {#data-catalog-glossaries-admin}

The `data-catalog.glossaries.admin` role enables viewing info on [glossaries](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.glossaries.editor` permissions.

## Roles for glossary term access management {#terms-roles}

### data-catalog.glossaryTerms.auditor {#data-catalog-glossaryTerms-auditor}

The `data-catalog.glossaryTerms.auditor` role enables viewing info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

### data-catalog.glossaryTerms.viewer {#data-catalog-glossaryTerms-viewer}

The `data-catalog.glossaryTerms.viewer` role enables viewing info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

This role includes the `data-catalog.glossaryTerms.auditor` permissions.

### data-catalog.glossaryTerms.user {#data-catalog-glossaryTerms-user}

The `data-catalog.glossaryTerms.user` role enables viewing info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog and using them.

### data-catalog.glossaryTerms.editor {#data-catalog-glossaryTerms-editor}

The `data-catalog.glossaryTerms.editor` role enables viewing info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as creating, using, modifying, and deleting them.

This role includes the `data-catalog.glossaryTerms.viewer` and `data-catalog.glossaryTerms.user` permissions.

### data-catalog.glossaryTerms.admin {#data-catalog-glossaryTerms-admin}

The `data-catalog.glossaryTerms.admin` role enables viewing info on [terms](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog as well as creating, using, modifying, and deleting them.

This role includes the `data-catalog.glossaryTerms.editor` permissions.

## Roles for ingestion access management {#ingestions-roles}

### data-catalog.ingestions.auditor {#data-catalog-ingestions-auditor}

The `data-catalog.ingestions.auditor` role enables viewing info on [downloads](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

### data-catalog.ingestions.viewer {#data-catalog-ingestions-viewer}

The `data-catalog.ingestions.viewer` role enables viewing info on [downloads](../concepts/data-catalog.md#glossaries-and-terms) in Data Catalog.

This role includes the `data-catalog.ingestions.auditor` permissions.

### data-catalog.ingestions.editor {#data-catalog-ingestions-editor}

The `data-catalog.ingestions.editor` role enables viewing info on [downloads](../concepts/data-catalog.md#metadata-upload) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.ingestions.viewer` permissions.

### data-catalog.ingestions.admin {#data-catalog-ingestions-admin}

The `data-catalog.ingestions.admin` role enables viewing info on [downloads](../../iam/concepts/access-control/index.md) in Data Catalog as well as creating, starting, stopping, modifying, and deleting them.

This role includes the `data-catalog.ingestions.editor` permissions.

## Roles for ingestion source access management {#ingestion-sources-roles}

### data-catalog.ingestionSources.auditor {#data-catalog-ingestionSources-auditor}

The `data-catalog.ingestionSources.auditor` role enables viewing info on [sources](../concepts/data-catalog.md#metadata-upload) in Data Catalog.

### data-catalog.ingestionSources.viewer {#data-catalog-ingestionSources-viewer}

The `data-catalog.ingestionSources.viewer` role enables viewing info on [sources](../concepts/data-catalog.md#metadata-upload) in Data Catalog.

This role includes the `data-catalog.ingestionSources.auditor` permissions.

### data-catalog.ingestionSources.editor {#data-catalog-ingestionSources-editor}

The `data-catalog.ingestionSources.editor` role enables viewing info on [sources](../concepts/data-catalog.md#metadata-upload) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.ingestionSources.viewer` permissions.

### data-catalog.ingestionSources.admin {#data-catalog-ingestionSources-admin}

The `data-catalog.ingestionSources.admin` role enables viewing info on [sources](../concepts/data-catalog.md#metadata-upload) in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.ingestionSources.editor` permissions.

## Roles for metadata link access management {#lineages-roles}

### data-catalog.lineages.auditor {#data-catalog-lineages-auditor}

The `data-catalog.lineages.auditor` role enables viewing info on data links in Data Catalog.

### data-catalog.lineages.viewer {#data-catalog-lineages-viewer}

The `data-catalog.lineages.viewer` role enables viewing info on data links in Data Catalog.

This role includes the `data-catalog.lineages.auditor` permissions.

### data-catalog.lineages.editor {#data-catalog-lineages-editor}

The `data-catalog.lineages.editor` role enables viewing info on data links in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.lineages.viewer` permissions.

### data-catalog.lineages.admin {#data-catalog-lineages-admin}

The `data-catalog.lineages.admin` role enables viewing info on data links in Data Catalog as well as creating, modifying, and deleting them.

This role includes the `data-catalog.lineages.editor` permissions.

## Required roles {#choosing-roles}

The table below lists the roles required for specific actions. You can always assign a role with more permissions, e.g., `editor` instead of `viewer`.

| Action                                                       | Required roles                                      |
|----------------------------------------------------------------|-------------------------------------------------------|
| View catalog metadata                             | `data-catalog.auditor`                    |
| View info on catalog access permissions and quotas | `data-catalog.viewer`                     |
| Create catalogs                                             | `data-catalog.editor`                     |
| Edit catalogs                                         | `data-catalog.editor`                     |
| Delete catalogs                                               | `data-catalog.editor`                     |
| Update catalog access permissions                             | `data-catalog.admin`                      |
| View and modify domains, tags, and terms                | `data-catalog.user`                       |
| View dataset information                      | `data-catalog.assets.auditor`             |
| Manage datasets: update, delete, or edit them | `data-catalog.assets.editor` |
| View classification information                       | `data-catalog.classifications.auditor`    |
| Edit classifications                                    | `data-catalog.classifications.editor`     |
| View tag information                               | `data-catalog.classificationsTags.auditor` |
| Edit tags                                             | `data-catalog.classificationsTags.editor`  |
| View glossary information                          | `data-catalog.glossaries.auditor`         |
| Edit glossaries                                        | `data-catalog.glossaries.editor`          |
| View term information                            | `data-catalog.glossaryTerms.auditor`      |
| Edit terms                                          | `data-catalog.glossaryTerms.editor`       |
| View ingestion settings                               | `data-catalog.ingestions.auditor`         |
| Edit ingestion settings                               | `data-catalog.ingestions.editor`          |
| View ingestion source settings                     | `data-catalog.ingestionSources.auditor`   |
| Edit ingestion source settings                     | `data-catalog.ingestionSources.editor`    |
| View information on data links                       | `data-catalog.lineages.auditor`           |
| Create, modify, and delete data links              | `data-catalog.lineages.editor`            |