DevOps Config roles

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • DevOps Config uses these roles.

    Important:
    Starting with the Washington D.C. release, DevOps Config is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported.
    Role title [name] Description Contains Roles

    [sn_devops.app_admin]

    DevOps Config app admin

    Can create/read/update/delete DevOps Config apps.

    		 None

    [sn_devops_config.viewer]

    DevOps Config viewer

    Has read-only access in DevOps Config.

    		 sn_cdm.cdm_viewer

    [sn_devops_config.editor]

    DevOps Config editor

    Can manage config data, create/commit changesets, and publish/unpublish snapshots.
    • sn_devops_config.viewer
    • sn_cdm.cdm_editor

    [sn_devops_config.secrets]

    DevOps Config secrets

    Able to manage encrypted config data within an application.

    sn_cdm.cdm_secrets

    [sn_devops_config.admin]

    DevOps Config admin

    Has editor role permissions plus ability to manage policies and exporters, and applications.
    • sn_devops.app_admin
    • sn_devops_config.editor
    • sn_cdm.cdm_admin