# Is it possible to grant ontology-create permissions only for action log object types?

**URL:** <https://community.palantir.com/t/is-it-possible-to-grant-ontology-create-permissions-only-for-action-log-object-types/2008>\
**Category:** Product Feedback\
**Tags:** ontology-management\
**Created:** [November 25, 2024, 7:21pm UTC](https://community.palantir.com/t/is-it-possible-to-grant-ontology-create-permissions-only-for-action-log-object-types/2008 "2024-11-25T19:21:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joel](https://yyz1.discourse-cdn.com/palantir/user_avatar/community.palantir.com/joel/32/3579_2.png) [@Joel](https://community.palantir.com/u/Joel)\
**Post date:** [November 25, 2024, 7:21pm UTC](https://community.palantir.com/t/is-it-possible-to-grant-ontology-create-permissions-only-for-action-log-object-types/2008/1 "2024-11-25T19:21:14Z")

</div>

Update: Moved to “Propose an Improvement”.

In my Foundry environment, my team and I are (correctly) not permitted to create object types, and we rely on issue tickets when we need to request a new object type.

Unfortunately, we need to enable logging, but this also requires issue tickets because we cannot create those object types. As a result, the added friction sometimes contributes to forgetting to configure action logging, and we recently lost some client data.

**Is it possible to have permission to create action log object types but not have permission to create other object types?** If so, please advise.

---

<div class="post-metadata">

**Author:** ![bkaplan](https://avatars.discourse-cdn.com/v4/letter/b/ea666f/32.png) [@bkaplan](https://community.palantir.com/u/bkaplan)\
**Post date:** [November 26, 2024, 2:40pm UTC](https://community.palantir.com/t/is-it-possible-to-grant-ontology-create-permissions-only-for-action-log-object-types/2008/2 "2024-11-26T14:40:23Z")

</div>

I am not sure if there is a way to allow for creation of only log object types, however you might be able to create a [custom role](https://www.palantir.com/docs/foundry/platform-security-management/manage-roles/#creating-a-custom-role) to grant limited ontology permissions (i.e. only allowed to create proposals or only allow for creating but not deleting or editing objects etc.) that might be able to help your team here.

---

<div class="post-metadata">

**Author:** ![system](https://yyz1.discourse-cdn.com/palantir/user_avatar/community.palantir.com/system/32/3_2.png) [@system](https://community.palantir.com/u/system)\
**Post date:** [January 25, 2025, 2:41pm UTC](https://community.palantir.com/t/is-it-possible-to-grant-ontology-create-permissions-only-for-action-log-object-types/2008/3 "2025-01-25T14:41:06Z")

</div>

Closed on January 25, 2025, 2:41pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.