Hi! We utilize a lot of custom role sets to control access within Projects. We want to allow users to configure both Object Security Policies and Property Security Policies on Object Types in a Project, but we don’t want to grant them the Owner role on the entire Project. What’s the exact granular permission that controls this?
Hi! Object Security Policies and Property Security Policies are both “property security groups” under the hood, so the same operations cover both. These are the granular permissions that gate changes to Object/Property Security Policies
ontology:create-property-security-groupontology:edit-property-security-groupontology:delete-property-security-group
You will need these set of permissions to change object/property security policies on a branch:
ontology:propose-create-property-security-groupontology:propose-edit-property-security-groupontology:propose-delete-property-security-group