Explore roles, teams and capabilities
Explorer's governance world shows the roles, their permissions and who holds them, teams and their people, and capabilities as records you filter, group and walk.
For: Platform administrator, Account administrator, Tenant administrator, Auditor
Prerequisite
Each column has its own key at the scope you are in: role.read for roles, permissions and assignments, team.read for teams and people, capability.read for capabilities. A column you cannot read is left out and the bar names its key.
Open it
- Open Records in the menu (at every scope; Explorer is its first lens).
- Choose Governance in the bar above the columns.
- Open the columns you need with Add column: Roles, Permissions, Assignments, Teams, People, Capabilities.
Find what you need
- Select a role to see the permissions it grants and the assignments of role it highlighted in the other columns.
- Group Permissions by Resource or Verb to see what a scope can do; filter Assignments by At this scope.
- Select a team to see its people (has member).
Good to know
- At the platform there are no assignments (they are held in an account or a tenant) and no teams (a team belongs to one tenant); the bar says so.
- The governance world is read only. Each column's footer links to where it is edited: Roles, Teams, the Capability Studio, the account Studio or Capabilities.