Server Configuration > Access Control List Permissions > Managing ACL Permissions > Required Permissions
  
Required Permissions
Each command requires the user to have certain minimum permissions assigned to that user.
Required Workflow and Document Permissions
The following table summarizes the workflow and document permissions required under mks:im to perform specific commands.
Command
Required Permission
im about
none
im acv
Login
im addlabel
Login
im admingui
Login
Admin
im analytics
Login
Admin
im baseline
Login
im branchsegment
Login
im changesegmentproject
Login
im charts
Login
im connect
Login
im copychart
Login
im copycontent
Login
im copydashboard
Login
im copyissue
Login
im copyquery
Login
CreateQuery
im copyreport
Login
im copytrigger
Login
im copytype
Login
Admin
Command is also available to type administrators.
im cps
Login
im createchart
Login
im createcontent
Login
im createdashboard
Login
im createdynamicgroup
Login
Admin
im createfield
Login
Admin
Command is also available to type administrators.
im creategroup
Login
Admin
im createissue
Login
im createproject
Login
Admin or CreateProject
im createquery
Login
CreateQuery
im createreport
Login
im createsegment
Login
im createstate
Login
Admin
Command is also available to type administrators.
im createtrigger
Login
Admin
im createtype
Login
Admin or CreateType
im createuser
Login
Admin
im dashboards
Login
im deletechart
Login
im deletedashboard
Login
im deletedynamicgroup
Login
Admin
im deletefield
Login
Admin
im deletegroup
Login
Admin
im deleteissue
Login
Admin
DeleteItem
ModifyDeleteItemRule
im deletelabel
Login
im deleteproject
Login
Admin or CreateProject
Command is also available to project administrators (for deleting subprojects only).
im deletequery
Login
im deletereport
Login
im deletestate
Login
Admin
Command is also available to type administrators (if they administer all types referencing that state).
im deletetrigger
Login
Admin
im deletetype
Login
Admin
im deleteuser
Login
Admin
im disconnect
Login
im dynamicgroups
Login
Admin or ViewAdmin
Command is also available to type, project, and change package administrators.
im echo
Login
im editchart
Login
im editdashboard
Login
im editdynamicgroup
Login
Admin
Command also available to project administrators
im editfield
Login
Admin
Command is also available to type administrators (if they administer all types referencing that field).
im editgroup
Login
Admin
im editissue
Login
im editproject
Login
Admin
Command is also available to project administrators.
im editquery
Login
im editreport
Login
im editstate
Login
Admin
Command is also available to type administrators.
im edittrigger
Login
Admin
im edittype
Login
Admin
Command is also available to type administrators.
im edituser
Login
Admin
im exit
Login
im extractattachments
Login
im extractwordtemplates
Login
Admin
im fields
Login
Admin or CreateType or ViewAdmin
Command is also available to type administrators.
im getdbfile
Login
AdminServer
im groups
Login
Admin or CreateType or CreateProject or CreateCPType
Command is also available to type, project, and change package administrators.
im gui
Login
im importcontent
Login
im importgroup
Login
Admin
im importissue
Login
Admin
im importsegment
Login
im importuser
Login
Admin
im insertsegment
Login
im issues
Login
im loadrc
Login
im movecontent
Login
im obtainadminlock
Login
Admin
im printissue
Login
im projects
Login
Admin or ViewAdmin or CreateProject or CreateType
Command is also available to project and type administrators.
im propagatetraces
Login
im purgeauditlog
Login
AdminServer
im putdbfile
Login
AdminServer
im queries
Login
im refmode
Login
im relationships
Login
im releaseadminlock
Login
Admin
im removebaseline
Login
im removecontent
Login
im reports
Login
im runchart
Login
im rundashboard
Login
im runreport
Login
im runtrigger
Login
Admin
im serveralerts
Login
im servers
Login
im setnotification
Login
ModifyMyNotification
ViewMyNotification
im setprefs
Login
im setproperty
Login
AdminServer
im states
Login
Admin or CreateType or ViewAdmin
Command is also available to type administrators.
im timeentries
Login
im triggers
Login
Admin or ViewAdmin
im types
Login
Admin or ViewAdmin
im updateclient
Login
Download (from mks:patch)
im users
Login
Admin or ViewAdmin or CreateType, CreateProject, CreateCPType
Command is also available to type, project, and change package administrators.
im viewadminlock
Login
Admin
im viewauditlog
Login
AdminServer or ViewAuditlog
im viewchart
Login
im viewcp
Login
ViewChangePackage
im viewdashboard
Login
im viewdynamicgroup
Login
Admin or ViewAdmin or CreateType, CreateProject, CreateCPType
Command is also available to type, project, and change package administrators.
im viewfield
Login
Admin or ViewAdmin or CreateType
Command also available to type administrators
im viewgroup
Login
Admin or ViewAdmin
View commands are also available to type, project, and change package administrators.
im viewissue
Login
im viewprefs
Login
im viewproject
Login
Admin or View Admin
Command is only available to project and type administrators.
im viewquery
Login
im viewreport
Login
im viewsegment
Login
im viewserveralert
Login
im viewstate
Login
Admin or ViewAdmin or CreateType
Command is also available to type administrators.
im viewtrigger
Login
Admin or ViewAdmin
im viewtype
Login
Admin or ViewAdmin or CreateType
Command is also available to type administrators.
im viewuser
Login
Admin or ViewAdmin or CreateType, CreateProject, CreateCPType
View commands are also available to type, project, and change package administrators.
Required Configuration Management Permissions
The following table summarizes the configuration management permissions required under mks:si to perform specific commands.
Command
Required Permissions
si about
none
si acceptcp
Login
SelfReview (if creator accepting)
SuperReview (if super reviewer accepting)
si activatedevpath
Login
OpenProject
ModifyDevpathActivation
si acv
Login
si add
Login
OpenProject
AddMember
Lock (if locking files)
ShareArchive (if sharing archives)
CreateSubproject (if creating subprojects)
ChangeArchiveType (if changing archive type due to inconsistent line terminators)
si addlabel
Login
OpenProject
ApplyLabel
MoveLabel (if label exists)
si addmemberattr
Login
OpenProject
ModifyMemberAttribute
si addmemberfromarchive
Login
OpenProject
AddMember
Lock
ShareArchive (If sharing archives)
CreateSubproject (if creating subprojects)
si addproject
Login
AddProject
si addprojectattr
Login
OpenProject
ModifyProjectAttribute
MoveProjectLabel (if label exists)
si addprojectlabel
Login
OpenProject
ApplyProjectLabel
si addprojectmergeline
Login
OpenProject
ModifyManualProjectMergeLine
si addprojectmetric
Login
OpenProject
Metrics
si addsandboxattr
Login
OpenProject
si addsubproject
Login
OpenProject
AddSubproject
ConfigureSubproject (if configuring subprojects)
si admingui
Login
Admin
si annotate
Login
OpenProject
FetchRevision
si appendcheckpointdesc
Login
Checkpoint
si appendrevdesc
Login
OpenProject
si applycp
Login
OpenProject
ModifyMemberRev
CreateDevPath (if applying change package from main trunk to development path)
* 
ExtendDevpath permission is required if this command is being performed against an extendable development path.
si archiveinfo
Login
OpenProject
* 
The mainline project’s permissions govern archive access. For example, assume that you are working with a variant project and want to view information for an archive. You need OpenProject permission for both the mainline project and the development path.
si calculateprojectmetrics
Login
OpenProject
si checkpoint
Login
OpenProject
Checkpoint
ApplyLabel (if labeling all members)
Promote (if promoting all members)
ApplyProjectLabel (if labeling projects)
PromoteProject (if promoting projects)
ModifyAuthor (if assigning an author)
MoveLabel (if moving member labels)
MoveProjectLabel (if moving project labels)
si ci
Login
OpenProject
CheckIn
ApplyLabel (if labeling the member)
Lock (if using locks)
ModifyAuthor (if assigning an author)
ModifyMemberRev (if updating member revision)
MoveLabel (if moving member labels)
ChangeArchiveType (if changing archive type due to inconsistent line terminators)
si closecp
Login
ChangePackageAdmin (if not creator)
ManageEmptyChangePackage (if change package is empty and user is not creator or a change package administrator)
si co
Login
OpenProject
FetchRevision
Lock (if locking the revision)
ModifyMemberRev (if updating member revision)
si configuresandbox
Login
si configuresubproject
Login
OpenProject
ConfigureSubproject
si connect
Login
si cpissues
Login
OpenProject
si createcp
Login
CreateChangePackage
* 
You can integrate workflows and documents with configuration management. In such cases, the ability to create change packages is based on the change package creation policy for the item type.
si createdevpath
Login
OpenProject
CreateDevPath
si createmetricinfo
Login
OpenProject
Metrics
si createproject
Login
OpenProject (to open the project after creating it)
CreateProject
si createsandbox
Login
OpenProject (to open Sandbox after creating it)
FetchRevision
si createsubproject
Login
OpenProject
CreateSubproject
si deactivatedevpath
Login
OpenProject
ModifyDevpathActivation
si deletelabel
Login
OpenProject
DeleteLabel
si deletearchive
AdminServer
DebugServer
DeleteArchive
* 
Either AdminServer or DebugServer is sufficient.
si deleteproject
AdminServer
DebugServer
DeleteArchive
DeleteProject
* 
Either AdminServer or DebugServer permission is sufficient.
si deleteprojectlabel
Login
OpenProject
DeleteProjectLabel
si deleteprojectmergeline
Login
OpenProject
ModifyManualProjectMergeLine
si deleterevision
Login
OpenProject
DeleteRevision
si demote
Login
OpenProject
Demote
si demoteproject
Login
OpenProject
DemoteProject
si diff
Login
OpenProject
FetchRevision
si difffiles
none
si discardcp
Login
ChangePackageAdmin (if not creator)
ManageEmptyChangePackage (if change package is empty and user is not the creator or a change package administrator)
si disconnect
none
si drop
Login
OpenProject
DropMember
si dropdevpath
Login
OpenProject
DropDevPath
si dropmemberattr
Login
OpenProject
ModifyMemberAttribute
si dropproject
Login
OpenProject
DropProject
si dropprojectattr
Login
OpenProject
ModifyProjectAttribute
si dropsandbox
none
si dropsandboxattr
Login
OpenProject
si dropsolution
Login
AdminIDESolutions
si echo
Login
si edit
Login
OpenProject
FetchRevision (if editing revision other than working file)
si editcp
Login
OpenProject
si exit
none
si extenddevpath
Login
OpenProject
ExtendDevPath
si freeze
Login
OpenProject
Freeze
si getdbfile
Login
AdminServer
si gui
none
If restore desktop set and views opened, appropriate permissions are required to reopen the GUI view.
si importsandbox
Login
OpenProject
si integrations
Login
OpenProject
si loadrc
none
si locate
Login
OpenProject
si lock
Login
OpenProject
Lock
si locks
Login
OpenProject
si makewritable
Login
OpenProject
si memberinfo
Login
OpenProject
si merge
Login
OpenProject
FetchRevision
si mergebranch
Login
OpenProject
FetchRevision
Lock
si mods
Login
OpenProject
si move
Login
OpenProject
AddMember (on target project)
DropMember (on source project)
CreateSubproject (if creating subprojects)
si movesubproject
Login
OpenProject
AddSubproject (on target project)
DropSubproject (on source project)
CreateSubproject (if creating subprojects)
ConfigureSubproject (for moving heterogeneous subprojects)
ModifyProjectAttribute
si opencp
Login
ChangePackageAdmin (if closed or not creator when in a state other than closed)
si print
Login
OpenProject
si projectcpdiff
Login
OpenProject
si projectlocks
Login
OpenProject
RemoveOtherUserLocks
si projectinfo
Login
OpenProject
si projects
Login
OpenProject
si promote
Login
OpenProject
Promote
si promoteproject
Login
OpenProject
PromoteProject
si purgeauditlog
Login
AdminServer
si putdbfile
Login
AdminServer
si rejectcp
Login
SuperReview (if rejecting as super reviewer)
si rename
Login
OpenProject
AddMember
DropMember
si report
Login
OpenProject
si restoreproject
Login
OpenProject
Checkpoint
RestoreProject
si restoresolution
Login
AdminIDESolutions
si restrictproject
Login
OpenProject
RestrictProject
si resync
Login
OpenProject
FetchRevision
si resynccp
Login
OpenProject
FetchRevision
* 
ExtendDevpath permission is required if this command is being performed against the sandbox of an extendable development path.
si retargetsandbox
Login
si revert
Login
OpenProject
si revisioninfo
Login
OpenProject
* 
The mainline project’s permissions govern revision access. For example, assume that you are working with a variant project and want to view information for a revision. You need OpenProject permission for the mainline project and the development path.
si rlog
Login
OpenProject
si sandboxes
none
si sandboxinfo
Login
OpenProject
si serveralerts
Login
si servers
none
si setmemberrule
Login
OpenProject
si setprefs
none
si setprojectdescription
Login
OpenProject
ModifyProjectAttribute
si setproperty
Login
AdminServer
si sharesubproject
Login
OpenProject
AddMember
ConfigureSubproject (if configuring subprojects)
si solutions
Login
si snapshot
Login
OpenProject
AddMember
ApplyLabel (if labeling all members)
ApplyProjectLabel (if labeling projects)
Checkpoint
DropMember
DropSubproject
ModifyAuthor (if assigning author)
MoveLabel (if moving member labels)
ModifyMemberRev
MoveProjectLabel (if moving project labels)
Promote (if promoting all members)
PromoteProject (if promoting projects)
SnapshotSandbox
si submit
Login
OpenProject
See also the permissions required for si add, si ci, si drop, and si rename.
si submitcp
Login
ChangePackageAdmin (if submitting another user’s change package)
si thaw
Login
OpenProject
Thaw
si unlock
Login
OpenProject
DowngradeOtherUserLocks (if downgrading another user’s lock from exclusive to non-exclusive)
RemoveOtherUserLocks (if removing another user’s lock)
si unlockarchive
Login
OpenProject
si unrestrictproject
Login
OpenProject
RestrictProject
si updatearchive
Login
ChangeArchiveType (if converting a text type archive to binary)
si updateclient
Login
OpenProject
Download
si updaterevision
Login
OpenProject
ModifyMemberRev
si viewauditlog
Login
AdminServer or ViewAuditLog
si viewcp
Login
si viewcps
Login
si viewhistory
Login
OpenProject
si viewlabels
Login
OpenProject
si viewlocks
Login
OpenProject
si viewnonmembers
Login
OpenProject
si viewmetricsinfo
Login
OpenProject
si viewprefs
none
si viewproject
Login
OpenProject
si viewprojecthistory
Login
OpenProject
si viewprojectmetrics
Login
OpenProject
si viewrevision
Login
OpenProject
FetchRevision
si viewsandbox
Login
OpenProject
si viewserveralert
Login