
This article describes the [permissions](/docs/settings/identity-access-management/permissions) needed to use the [Data Modeling Hub](/docs/assets).

To set the permissions, you need to create a user role or edit an existing one and open the Permissions matrix. In the matrix, the permissions are collected into groups. Some of these groups can be expanded to set more granular permissions.

## How to read this list

In this article, each heading describes an action. The permissions for that action are described in the form of breadcrumbs.

**For example**, if the required permissions are:
- **Profiles** > **Client list**: `read`
- **Search engine**: `create`, `edit`

The permission matrix needs to look like this:
<figure><img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/permissions-example.png" class="large" alt="Permissions example"><figcaption>Permission example, see description above figure.</figcaption></figure>

The `read` permission is not explicitly listed when any higher permission is required - the portal enables it automatically.

## I want to...

### work with catalogs

#### see catalogs and items

- **Assets** > **Catalogs**: `read`
- If you want to filter the view, you need:
    - **Analytics** > **Segmentations**, **Aggregates**, **Expressions**: `read`
    - **Communications** (all): `read`

#### create catalogs

**Assets** > **Catalogs**: `create`, `edit`

#### import data to catalogs

- **From CSV**: **Assets** > Simple imports: `execute`, `create`
    - To preview the file: **Automation** > **Journeys**: `read`
- **With automation**: **Automation** > **Workflows**: `execute`, `create`, `edit`

#### export records from catalogs

- **Assets** > **Catalogs**: `read`
- **With simple export**: 
    - **Data export** > **Data export list**: `read` - to access the list of exports
    - **Data export** > **Save file**: `execute`
- **With automation**: **Automation** > **Workflows**: `execute`, `create`, `edit`


#### change catalog settings
This includes event enrichment and indexing.

**Assets** > **Catalogs**: `create`, `edit`

#### modify catalog items

**Assets** > **Catalogs**: `create`, `edit`

### manage event definitions

#### see event definitions and their JS SDK settings
- **Assets** > **Events**: `read`
- **Profiles** > Client details > Client activities: `read`
- **Assets** > **Catalogs**: `read`

#### create and edit event definitions and their JS SDK settings
**Assets** > **Events** > create, edit

### manage event parameters

#### see event parameters

- **Assets** > **Events**: `read`
- **Assets** > **Attributes**: `read`

#### create event parameters

- **Assets** > **Events**: `create`, `edit`
- **Assets** > **Attributes**: `create`, `edit`


### work with asset tags

**Assets** > **Tags**:
- `read` - to see the list of tags and tag directories
- `create`, `edit` - to add and edit tags and tag directories
- `delete` - to delete tags


#### create and edit profile tags
- **Assets** > **Tags**: `create`, `edit`
- **Profiles** > **Client tags**: `create`, `edit`

### use the File Explorer
**Assets** > **File Explorer**:
- `read` - to see the list of files and file details
- `create`, `edit` - to upload files
- `delete` - to delete files

### work with Brickworks

#### see schemas

- **Assets** > **Brickworks**: `read`

#### create and edit schemas

- **Assets** > **Brickworks**: `create`
- To use audiences other than ALL:
  - **Analytics** > **Segmentations**, **Expressions**, **Aggregates**: `read` - to select an existing segmentation or create a new audience
  - **Analytics** > **Segmentations**: `create` - to save the configuration of new audience as a segmentation for later use

#### see records

- **Assets** > **Brickworks**: `read`
- To select a profile context for preview:
  - **Profiles**: `read` - to search or select from the list of all profiles
  - **Analytics** > **Segmentations**: `read` - to select a profile from a segmentation

#### create and edit records

- **Assets** > **Brickworks**: `create`
- To be able to select values in Synerise Object fields:
  - **Analytics** > **Expressions**: `read` - for expressions
  - **Analytics** > **Aggregates**: `read` - for aggregates
  - **Assets** > **Code pool**: `read` - for vouchers
  - **Assets** > **Attributes**: `read` - for profile attributes
  - **Communications** > **Recommendations**: `read` - for recommendations
  - **Assets** > **Catalogs**: `read` - for catalogs

#### publish records

- **Assets** > **Brickworks**: `execute`

#### see external sources

- **Assets** > **Brickworks**: `read`

#### create external sources

- **Assets** > **Brickworks**: `create`
- **Settings** > **Connections**: `read` (to use existing connections), `create` and `edit` (to create new connections)
- **Settings** > **API key**: `read` - to access the list of API keys in connections which require them

### manage documents

#### see documents
**Assets** > **Documents**: `read`

#### create and edit documents
- **Assets** > **Documents**: create
- To use audiences other than ALL:
  - **Analytics** > **Segmentations**, **Expressions**, **Aggregates**: `read` - to select an existing segmentation or create a new audience
  - **Analytics** > **Segmentations**: `create` - to save the configuration of new audience as a segmentation for later use

#### activate, pause, resume, and stop documents
**Assets** > **Documents**: `create`

#### duplicate and move documents
**Assets** > **Documents**: `create`

#### delete documents

**Assets** > **Documents**: `delete`

### manage snippets

#### see snippet list and details
- **Templates**: `read`
- **Assets** > **Documents**: `edit`

#### add snippets
**Templates**: `create`, `edit`

#### delete snippets
**Templates**: `delete`

### manage voucher pools

#### see voucher pools and vouchers
**Assets** > **Code pool**: `read`

#### create and edit voucher pools, add vouchers
**Assets** > **Code pool**: `create`, `edit`

#### delete voucher pools
**Assets** > **Code pool**: `delete`

### use Schema Builder

#### see schemas

- **Assets** > **Schema builder**: `read`
- **Communications** (all): `read`

#### edit schemas and records
**Assets** > **Schema builder**: `edit`

#### create schemas and records
**Assets** > **Schema builder**: `create`

#### change schema privacy settings
**Settings** > **Object permissions**: `create`

### import data
- **Assets** (any): `read` - to access the Data Management menu
- **Automations** (all): `read`
- **Simple Imports**: `read`

#### from local file

**Simple Imports**: `execute`, `create`

#### with Automation
- **Automations** (all): `create`, `edit`

### export data to downloadable files

- **Data export** > **Data export list**: `read` - to access the list of exports
- **Data export** > **Save file**: `execute`
