Skip to content

Commit fff9ba9

Browse files
Remove delisted scopes (#16453)
In the interest of making scopes easier for customers to manage, we consolidated some of our scopes. This removes the delisted scopes from our docs.
1 parent c53af71 commit fff9ba9

File tree

2 files changed

+0
-6
lines changed

2 files changed

+0
-6
lines changed

content/docs/administration/access-identity/rbac/scopes/environments.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,6 @@ Note that creating, listing, or restoring environments are organization-level op
2525
| Value | Description |
2626
|-------|-------------|
2727
| `environment:clone` | Create a copy of an existing environment with all its configurations. This is useful for creating staging or testing environments.<br><br>**Granted by default permission**: `Environment Open` |
28-
| `environment:read_decrypt` | Access and decrypt sensitive environment data. This allows viewing encrypted configuration values and secrets.<br><br>**Granted by default permission**: `Environment Open` |
2928
| `environment:delete` | Remove an environment and its associated resources. This permanently deletes the environment and its configurations.<br><br>**Granted by default permission**: `Environment Admin` |
3029
| `environment:open` | Access and interact with an environment's resources. This includes the ability to view and modify environment configurations.<br><br>**Granted by default permission**: `Environment Open` |
3130
| `environment:read` | View environment configurations and settings. This provides read-only access to environment details and parameters.<br><br>**Granted by default permission**: `Environment Read` |
@@ -63,7 +62,6 @@ Note that creating, listing, or restoring environments are organization-level op
6362
| Value | Description |
6463
|-------|-------------|
6564
| `environment_version:create` | Create a new version of an environment. This allows tracking changes and maintaining environment history.<br><br>**Granted by default permission**: `Environment Write` |
66-
| `environment_version:read_decrypt` | Access and decrypt sensitive data in an environment version. This allows viewing encrypted configuration values.<br><br>**Granted by default permission**: `Environment Open` |
6765
| `environment_version:delete` | Remove a specific version of an environment. This permanently deletes the version and its configurations.<br><br>**Granted by default permission**: `Environment Write` |
6866
| `environment_version:open` | Access and interact with a specific environment version. This includes viewing and using version-specific configurations.<br><br>**Granted by default permission**: `Environment Open` |
6967
| `environment_version:read` | View details of a specific environment version. This provides access to version-specific configurations and metadata.<br><br>**Granted by default permission**: `Environment Open` |

content/docs/administration/access-identity/rbac/scopes/org-settings.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -93,9 +93,7 @@ This document defines all the available scopes in Pulumi Cloud, organized by [en
9393
| `org_member:read` | View details about organization members. This includes access to user profiles and roles.<br><br>**Granted by default roles**: `Member`, `Admin`, `Billing Manager` |
9494
| `org_member:set_admin` | Grant or revoke admin privileges for an organization member. This controls elevated access.<br><br>**Granted by default roles**: `Admin` |
9595
| `org_member:update` | Update organization member information and roles. This allows changing user details and permissions.<br><br>**Granted by default roles**: `Admin` |
96-
| `org_requests:create` | Submit a new request to join or interact with the organization. This is used for onboarding or special access. |
9796
| `org_requests:read` | View all organization requests. This provides visibility into pending and processed requests.<br><br>**Granted by default roles**: `Admin` |
98-
| `org_requests:status` | Check the status of an organization request. This helps track onboarding or access progress. |
9997
| `org_requests:update` | Update or process organization requests. This allows approving or denying requests.<br><br>**Granted by default roles**: `Admin` |
10098
| `invites:create` | Send invitations to new users to join the organization. This enables onboarding of new team members.<br><br>**Granted by default roles**: `Admin` |
10199
| `invites:read` | View pending and sent invitations for organization membership. This provides visibility into user onboarding status.<br><br>**Granted by default roles**: `Admin` |
@@ -119,8 +117,6 @@ This document defines all the available scopes in Pulumi Cloud, organized by [en
119117
| `organization:billing` | Manage billing settings and payment methods for the organization. This includes access to invoices and payment history.<br><br>**Granted by default roles**: `Admin`, `Billing Manager` |
120118
| `organization:change_backend` | Change the backend infrastructure for the organization. This is used for advanced configuration and migration.<br><br>**Granted by default roles**: `Admin` |
121119
| `organization:delete` | Delete the organization and all its resources. This is a permanent and irreversible action.<br><br>**Granted by default roles**: `Admin` |
122-
| `organization:read` | View organization details and settings. This includes access to organizational metadata and configuration.<br><br>**Granted by default roles**: `Member`, `Admin`, `Billing Manager` |
123-
| `organization:read_activity` | View recent activity and audit logs for the organization. This provides insight into changes and events.<br><br>**Granted by default roles**: `Member`, `Admin`, `Billing Manager` |
124120
| `organization:read_usage` | View usage statistics and metrics for the organization. This includes resource consumption and cost data.<br><br>**Granted by default roles**: `Member`, `Admin`, `Billing Manager` |
125121
| `organization:rename` | Change the name of the organization. This updates the organization's display name across the platform.<br><br>**Granted by default roles**: `Admin` |
126122
| `organization:transfer_stacks` | Transfer ownership of stacks between organizations. This is used for organizational restructuring or migration.<br><br>**Granted by default roles**: `Admin` |

0 commit comments

Comments
 (0)