# Permission Reference

## Admin permissions

This matrix shows both `display name` (first column) and `code name` (second column) for permissions. Knowing `code name` may be helpful while using API / CLI.

<table data-full-width="true"><thead><tr><th>Permission</th><th>Code name</th><th>Description</th></tr></thead><tbody><tr><td>View Kafka Settings</td><td>ViewKafkaSettings</td><td>Allows viewing Kafka ACLs, Quotas</td></tr><tr><td>Manage Kafka Settings</td><td>ManageKafkaSettings</td><td>Allows managing Kafka ACLs, Quotas</td></tr><tr><td>View Log</td><td>ViewLogs</td><td>Allows viewing Lenses logs</td></tr><tr><td>View Users</td><td>ViewUsers</td><td>Allows viewing the users, groups and service accounts</td></tr><tr><td>Manage Users</td><td>ManageUsers</td><td>Allows to add/remove/update/delete users,groups and service accounts</td></tr><tr><td>View Alert Rules</td><td>ViewAlertRules</td><td>Allows viewing the alert settings rules</td></tr><tr><td>Manage Alert Rules</td><td>ManageAlertRules</td><td>Allows adding/deleting/updating alert settings rules</td></tr><tr><td>View Audit</td><td>ViewAuditLogs</td><td>Allows viewing the audit records</td></tr><tr><td>View Data Policies</td><td>ViewDataPolicies</td><td>Allows viewing the data policies</td></tr><tr><td>Manage Data Policies</td><td>ManageDataPolicies</td><td>Allows to add/remove/update data policies</td></tr><tr><td>Manage Connections</td><td>ManageConnections</td><td>Allows to add/remove/update connections</td></tr><tr><td>View Approvals</td><td>ViewApprovalRequest</td><td>Allows viewing raised approval requests</td></tr><tr><td>Manage Approvals</td><td>ManageApprovalRequest</td><td>Allows to accept/reject requests</td></tr><tr><td>Manage Lenses License</td><td>ManageLensesLicense</td><td>Allows to update Lenses license at runtime via the Lenses API</td></tr><tr><td>Manage Audit Logs</td><td>ManageAuditLogs</td><td>Allows deleting audit logs</td></tr></tbody></table>

## Data permissions

<table data-full-width="true"><thead><tr><th>Permission</th><th>Description</th></tr></thead><tbody><tr><td>Show</td><td>Allows viewing the topic name and basic info</td></tr><tr><td>Query</td><td>Allows viewing the data in a topic</td></tr><tr><td>Create</td><td>Allows creating topics</td></tr><tr><td>Create Topic Request</td><td>Topics are not created directly, they are sent for approval</td></tr><tr><td>Drop</td><td>Allows deleting topics</td></tr><tr><td>Configure</td><td>Allows changing a topic configuration</td></tr><tr><td>Insert Data</td><td>Allows inserting data into the topic</td></tr><tr><td>Delete Data</td><td>Allows deleting data from the topic</td></tr><tr><td>Update Schema</td><td>Allows configuring the topic storage format and schema</td></tr><tr><td>View Schema</td><td>Allows viewing schema information</td></tr><tr><td>Show Index</td><td>Allows viewing Elasticsearch index information</td></tr><tr><td>Query Index</td><td>Allows viewing the data in an Elasticsearch index</td></tr></tbody></table>

## Application permissions

This matrix shows both `display name` (first column) and `code name` (second column) for permissions. Knowing `code name` may be helpful while using API / CLI.

<table data-full-width="true"><thead><tr><th>Permission</th><th>Code name</th><th>Description</th></tr></thead><tbody><tr><td>View SQL Processors</td><td>ViewSQLProcessors</td><td>Allows viewing the SQL processors</td></tr><tr><td>Manage SQL Processors</td><td>ManageSQLProcessors</td><td>Allows to add/remove/stop/delete SQL processors</td></tr><tr><td>View Schemas</td><td>ViewSchemaRegistry</td><td>Allows viewing your Schema Registry entries</td></tr><tr><td>Manage Schema Registry</td><td>ManageSchemaRegistry</td><td>Allows to add/remove/update/delete your Schema Registry entries</td></tr><tr><td>View Topology</td><td>ViewTopology</td><td>Allows viewing the data pipeline topology</td></tr><tr><td>Manage Topology</td><td>ManageTopology</td><td>Allows decommissioning topology applications</td></tr><tr><td>View Kafka Connectors</td><td>ViewConnectors</td><td>Allows viewing running Kafka Connectors</td></tr><tr><td>Manage Kafka Connectors</td><td>ManageConnectors</td><td>Allows to add/update/delete/stop Kafka Connectors</td></tr><tr><td>View Kafka Consumers</td><td>ViewKafkaConsumers</td><td>Allows viewing the Kafka Consumers details</td></tr><tr><td>Manage Kafka Consumers</td><td>ManageKafkaConsumers</td><td>Allows changing the Kafka Consumers offset</td></tr><tr><td>Connect Clusters Access</td><td>-</td><td>Allows to use Connect Clusters</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.lenses.io/latest/devx/5.5/deployment/configuration/iam/permission-reference.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.