---
updatedAt: 2026-10-15T19:43:14.000Z
agentTools:
  projectIndex: https://docs.getmontecarlo.com/llms.txt
---

# IAM Resources and Permissions

This page lists all IAM resources and their related permissions in Monte Carlo.
This information is useful when configuring custom account roles.

### Permission Types

Permissions have a type that indicates the kind of operations they authorize. The type is indicated by an icon next to the permission name:

* 📖 `read` – Authorizes operations that involve viewing/querying (read only--no changes)
* ✏️ `write` – Authorizes operations that involve some form of modification (create, update, delete, etc.)

In role definitions, you can leverage these to allow or deny permissions of a specific type. For example, if you wanted to grant all `read` type operations to a resource (but deny all `write` type operations), you can use a policy statement like `monitors/read: allow`.

## GraphQL

Controls core access to the GraphQL API for executing queries and mutations.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Query</strong> <span title="Allows read-type access">📖</span><br /><code>graphql/query</code></td>
    <td>Allow reading data (executing queries) via the GraphQL API. This is required for baseline read-only access to the system, and is always asserted in addition to any more specific permissions.</td>
  </tr>
  <tr>
    <td><strong>Mutate</strong> <span title="Allows write-type access">✏️</span><br /><code>graphql/mutate</code></td>
    <td>Allow making modifications (executing mutations) via the GraphQL API. This is required for any writes. This is always asserted in addition to any more specific permissions.</td>
  </tr>
  </tbody>
</table>

## Monitors

Controls access to data + AI monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/access</code></td>
    <td>⚠️ <strong>Deprecated</strong>: Use type-specific permissions under monitors/management/ (e.g., monitors/management/table/access). During transition, this permission is kept as an alias.</td>
  </tr>
  <tr>
    <td><strong>Aggregates</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/aggregates</code></td>
    <td>Allow viewing monitor metrics and aggregate summaries without full monitor access. Used for dashboards and reporting.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/edit</code></td>
    <td>⚠️ <strong>Deprecated</strong>: Use type-specific permissions under monitors/management/ (e.g., monitors/management/table/edit). During transition, this permission is kept as an alias.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/draft</code></td>
    <td>⚠️ <strong>Deprecated</strong>: Use type-specific permissions under monitors/management/ (e.g., monitors/management/table/draft). During transition, this permission is kept as an alias.</td>
  </tr>
  </tbody>
</table>

### Management

Controls creation, editing, drafting, and tuning of monitors by type. Use type-based/wildcard policies (e.g., monitors/management/write, monitors/management/\*) to grant across all monitor types.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Tune Model</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/tune-model</code></td>
    <td>Allow tuning the detection model of existing monitors (e.g., adjusting anomaly sensitivity/thresholds) without permission to create, edit, or delete monitors. Anyone with monitor edit access can already tune; grant this to extend tuning to roles that otherwise only respond to alerts.</td>
  </tr>
  </tbody>
</table>

#### Table

Controls access to table monitors (freshness, volume, and asset selection-based monitoring).

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/table/access</code></td>
    <td>Allow viewing table monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/table/edit</code></td>
    <td>Allow creating, updating, and deleting table monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/table/draft</code></td>
    <td>Allow creating and editing draft table monitors before they are published.</td>
  </tr>
  </tbody>
</table>

#### Metric

Controls access to metric/stats monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/metric/access</code></td>
    <td>Allow viewing metric monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/metric/edit</code></td>
    <td>Allow creating, updating, and deleting metric monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/metric/draft</code></td>
    <td>Allow creating and editing draft metric monitors.</td>
  </tr>
  </tbody>
</table>

#### Validation

Controls access to validation rule monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/validation/access</code></td>
    <td>Allow viewing validation monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/validation/edit</code></td>
    <td>Allow creating, updating, and deleting validation monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/validation/draft</code></td>
    <td>Allow creating and editing draft validation monitors.</td>
  </tr>
  </tbody>
</table>

#### Comparison

Controls access to comparison monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/comparison/access</code></td>
    <td>Allow viewing comparison monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/comparison/edit</code></td>
    <td>Allow creating, updating, and deleting comparison monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/comparison/draft</code></td>
    <td>Allow creating and editing draft comparison monitors.</td>
  </tr>
  </tbody>
</table>

#### Custom Sql

Controls access to custom SQL monitors and SQL templates.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/custom-sql/access</code></td>
    <td>Allow viewing custom SQL monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/custom-sql/edit</code></td>
    <td>Allow creating, updating, and deleting custom SQL monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/custom-sql/draft</code></td>
    <td>Allow creating and editing draft custom SQL monitors.</td>
  </tr>
  </tbody>
</table>

#### Json Schema

Controls access to JSON schema monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/json-schema/access</code></td>
    <td>Allow viewing JSON schema monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/json-schema/edit</code></td>
    <td>Allow creating, updating, and deleting JSON schema monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/json-schema/draft</code></td>
    <td>Allow creating and editing draft JSON schema monitors.</td>
  </tr>
  </tbody>
</table>

#### Agent Evaluation

Controls access to agent evaluation monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/agent-evaluation/access</code></td>
    <td>Allow viewing agent evaluation monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-evaluation/edit</code></td>
    <td>Allow creating, updating, and deleting agent evaluation monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-evaluation/draft</code></td>
    <td>Allow creating and editing draft agent evaluation monitors.</td>
  </tr>
  </tbody>
</table>

#### Agent Trajectory

Controls access to agent trajectory monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/agent-trajectory/access</code></td>
    <td>Allow viewing agent trajectory monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-trajectory/edit</code></td>
    <td>Allow creating, updating, and deleting agent trajectory monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-trajectory/draft</code></td>
    <td>Allow creating and editing draft agent trajectory monitors.</td>
  </tr>
  </tbody>
</table>

#### Agent Metric

Controls access to agent metric monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/agent-metric/access</code></td>
    <td>Allow viewing agent metric monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-metric/edit</code></td>
    <td>Allow creating, updating, and deleting agent metric monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-metric/draft</code></td>
    <td>Allow creating and editing draft agent metric monitors.</td>
  </tr>
  </tbody>
</table>

#### Agent Validation

Controls access to agent validation monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/agent-validation/access</code></td>
    <td>Allow viewing agent validation monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-validation/edit</code></td>
    <td>Allow creating, updating, and deleting agent validation monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/agent-validation/draft</code></td>
    <td>Allow creating and editing draft agent validation monitors.</td>
  </tr>
  </tbody>
</table>

#### Query Performance

Controls access to query performance monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/query-performance/access</code></td>
    <td>Allow viewing query performance monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/query-performance/edit</code></td>
    <td>Allow creating, updating, and deleting query performance monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/query-performance/draft</code></td>
    <td>Allow creating and editing draft query performance monitors.</td>
  </tr>
  </tbody>
</table>

#### Job

Controls access to job monitors.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/management/job/access</code></td>
    <td>Allow viewing job monitors and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/job/edit</code></td>
    <td>Allow creating, updating, and deleting job monitors.</td>
  </tr>
  <tr>
    <td><strong>Draft</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/management/job/draft</code></td>
    <td>Allow creating and editing draft job monitors.</td>
  </tr>
  </tbody>
</table>

### Data Sampling

Controls access to sampled data from monitored tables.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/data-sampling/access</code></td>
    <td>Allow accessing sampled data from tables. Required to view sample data in the UI.</td>
  </tr>
  <tr>
    <td><strong>Download</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/data-sampling/download</code></td>
    <td>Allow downloading sampled data from tables.</td>
  </tr>
  </tbody>
</table>

### Exceptions

Controls access to monitor exception management for tracking and commenting on breached rows.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>monitors/exceptions/access</code></td>
    <td>Allow viewing monitor exception activity logs.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>monitors/exceptions/edit</code></td>
    <td>Allow editing monitor exceptions, including updating attributes and adding comments.</td>
  </tr>
  </tbody>
</table>

## Compliance

Controls access to compliance features built on monitoring results.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>compliance/access</code></td>
    <td>Allow viewing the Compliance area. Each compliance feature also requires its own permission, such as PII Inventory access.</td>
  </tr>
  </tbody>
</table>

### PII Inventory

Controls access to the PII inventory, which lists the columns where PII scans found sensitive data. Always required in addition to monitor access. Viewing and exporting also need monitor read. Marking findings as Not PII, restoring them and creating Jira tickets also need monitor write. PII filter configuration is controlled separately under Settings → PII Filters.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>compliance/pii-inventory/access</code></td>
    <td>Allow viewing the PII inventory, its findings and sample values. Also required, together with monitor write, to mark findings as Not PII, restore them or create Jira tickets.</td>
  </tr>
  <tr>
    <td><strong>Export</strong> <span title="Allows read-type access">📖</span><br /><code>compliance/pii-inventory/export</code></td>
    <td>Allow exporting the PII inventory as a CSV. Also requires the access permission.</td>
  </tr>
  </tbody>
</table>

## Dashboard

Controls access to dashboards for visualizing data + AI quality metrics and insights.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>dashboard/access</code></td>
    <td>Allow viewing dashboards.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>dashboard/edit</code></td>
    <td>Allow creating and editing all dashboards in the account.</td>
  </tr>
  <tr>
    <td><strong>Edit Their Own</strong> <span title="Allows write-type access">✏️</span><br /><code>dashboard/edit-their-own</code></td>
    <td>Allow creating and editing only dashboards the current user created. Those with `dashboard/edit` permission can also edit these dashboards.</td>
  </tr>
  </tbody>
</table>

## Data Products

Controls access to data products for organizing and tracking related data + AI assets.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>data-products/access</code></td>
    <td>Allow viewing data products.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>data-products/edit</code></td>
    <td>Allow creating and editing all data products in the account.</td>
  </tr>
  <tr>
    <td><strong>Edit Their Own</strong> <span title="Allows write-type access">✏️</span><br /><code>data-products/edit-their-own</code></td>
    <td>Allow creating and editing only data products the current user created. Those with `data-products/edit` permission can also edit these data products.</td>
  </tr>
  </tbody>
</table>

## Data Exports

Controls access to data exports for downloading reports and data.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>data-exports/access</code></td>
    <td>Allow accessing and downloading data exports.</td>
  </tr>
  </tbody>
</table>

## Alerts

Controls access to alerts for viewing and managing data + AI quality issues.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>alerts/access</code></td>
    <td>Allow viewing alerts and their details.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>alerts/edit</code></td>
    <td>Allow editing alerts, including merging, splitting, and updating properties.</td>
  </tr>
  <tr>
    <td><strong>Update Status</strong> <span title="Allows write-type access">✏️</span><br /><code>alerts/update-status</code></td>
    <td>Allow updating alert status (e.g., acknowledging, resolving) and providing feedback on anomaly detections.</td>
  </tr>
  </tbody>
</table>

## Assets

Controls access to the assets catalog for exploring and managing asset metadata.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>assets/access</code></td>
    <td>Allow viewing the assets catalog and asset metadata.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>assets/edit</code></td>
    <td>Allow editing asset metadata in the catalog.</td>
  </tr>
  </tbody>
</table>

## Lineage

Controls access to data + AI lineage features for understanding and monitoring data + AI flows.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>lineage/access</code></td>
    <td>Allow viewing lineage graphs and their metadata.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>lineage/edit</code></td>
    <td>Allow creating and editing lineage metadata (nodes, edges, etc.).</td>
  </tr>
  </tbody>
</table>

## Performance

Controls access to performance analytics to support query and warehouse analysis and optimization.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>performance/access</code></td>
    <td>Allow accessing the performance dashboard and query analytics.</td>
  </tr>
  </tbody>
</table>

### Insights

Controls access to the cost and performance insights generated for an account.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>performance/insights/edit</code></td>
    <td>Allow acting on an insight, such as creating a ticket from it in a connected ticketing tool.</td>
  </tr>
  </tbody>
</table>

## Users

Controls non-admin access to other account users.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>List</strong> <span title="Allows read-type access">📖</span><br /><code>users/list</code></td>
    <td>Allow listing users in the account for features like assignee selection and @mentions.</td>
  </tr>
  <tr>
    <td><strong>Account Owners</strong> <span title="Allows read-type access">📖</span><br /><code>users/account-owners</code></td>
    <td>Allow viewing the list of Account Owners in the account.</td>
  </tr>
  </tbody>
</table>

## Settings

Controls access to account settings and configuration.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/access</code></td>
    <td>Top-level permission for viewing account settings. This is used where there is not a more specific permission for a given setting.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/edit</code></td>
    <td>Top-level permission for editing account settings. This is used where there is not a more specific permission for a given setting.</td>
  </tr>
  <tr>
    <td><strong>List Iam Resources</strong> <span title="Allows read-type access">📖</span><br /><code>settings/list-iam-resources</code></td>
    <td>Allow listing IAM resource and permission definitions. Required for managing users, authorization groups, or roles, since these operations need to display available permissions.</td>
  </tr>
  <tr>
    <td><strong>Set Account Name</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/set-account-name</code></td>
    <td>Allow changing the account display name.</td>
  </tr>
  <tr>
    <td><strong>Set Required Monitor Fields</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/set-required-monitor-fields</code></td>
    <td>Allow changing which monitor fields must be filled in when creating or editing a monitor in this account.</td>
  </tr>
  </tbody>
</table>

### User

Controls self-managed, user-specific settings and preferences.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Subscribe Weekly Digest</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/user/subscribe-weekly-digest</code></td>
    <td>Allow subscribing to or unsubscribing from the weekly digest email notification.</td>
  </tr>
  </tbody>
</table>

### Users

Controls management of user accounts, including invitations and user attributes.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/users/access</code></td>
    <td>Allow viewing authentication and authorization settings.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/users/edit</code></td>
    <td>Allow managing users, authorization groups, SSO, and authorization provisioning (SCIM) settings.</td>
  </tr>
  </tbody>
</table>

### Authorization Groups

Controls management of authorization groups and their membership, including auth provisioning (SCIM) settings.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/authorization-groups/access</code></td>
    <td>Allow viewing authorization groups and their members. Also required for user management, since group membership is displayed when managing users.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/authorization-groups/edit</code></td>
    <td>Allow creating, editing, and deleting authorization groups.</td>
  </tr>
  <tr>
    <td><strong>Manage Owners</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/authorization-groups/manage-owners</code></td>
    <td>Allow managing members of the built-in Account Owners authorization group.</td>
  </tr>
  <tr>
    <td><strong>Manage Domains Managers</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/authorization-groups/manage-domains-managers</code></td>
    <td>Allow managing members of the built-in Domains Managers authorization group.</td>
  </tr>
  </tbody>
</table>

### Roles

Controls management of custom account roles and their permission definitions.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/roles/access</code></td>
    <td>Allow viewing account roles and their permission definitions. Also required for managing authorization groups, since role assignment requires listing available roles.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/roles/edit</code></td>
    <td>Allow creating, editing, and deleting custom account roles.</td>
  </tr>
  </tbody>
</table>

### SSO

Controls access to single sign-on (SSO) configuration settings.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/sso/access</code></td>
    <td>Allow viewing SSO configuration settings.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/sso/edit</code></td>
    <td>Allow configuring single sign-on (SSO) settings.</td>
  </tr>
  </tbody>
</table>

### Agents

Controls access to agent management for data collection agents.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/agents/access</code></td>
    <td>Allow viewing agent details, logs, and reachability information.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/agents/edit</code></td>
    <td>Allow creating, updating, deleting, and managing data collection agents.</td>
  </tr>
  </tbody>
</table>

### AI Agents

Controls who can administer the settings for Monte Carlo's AI agents, such as enabling or disabling an agent and configuring automated triage. This is separate from the permissions that control who can run the agents.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/ai-agents/access</code></td>
    <td>Allow viewing AI agent settings.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/ai-agents/edit</code></td>
    <td>Allow enabling, disabling, and configuring AI agents, including automated triage thresholds, usage limits, and per-domain overrides.</td>
  </tr>
  </tbody>
</table>

### Agent Conversation Logs

Controls who can export the account's Operations Agent conversation logs for compliance and security review. This is an administrative capability, separate from the permissions that control who can run or chat with the agent.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/agent-conversation-logs/access</code></td>
    <td>Allow exporting the account's Operations Agent conversation logs.</td>
  </tr>
  </tbody>
</table>

### Deployments

Controls access to deployments, which host the collection agents and data stores that connect Monte Carlo to your environment.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/deployments/access</code></td>
    <td>Allow viewing deployment details.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/deployments/edit</code></td>
    <td>Allow creating, updating, and deleting deployments.</td>
  </tr>
  </tbody>
</table>

### Domains

Controls access to domain management for organizing data + AI assets.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/domains/access</code></td>
    <td>Allow viewing domain settings.</td>
  </tr>
  <tr>
    <td><strong>List</strong> <span title="Allows read-type access">📖</span><br /><code>settings/domains/list</code></td>
    <td>Allow listing available domains.</td>
  </tr>
  <tr>
    <td><strong>View Detail</strong> <span title="Allows read-type access">📖</span><br /><code>settings/domains/view-detail</code></td>
    <td>Allow viewing detailed domain information and their assets.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/domains/edit</code></td>
    <td>Allow creating, editing, and deleting domains and related settings.</td>
  </tr>
  </tbody>
</table>

### PII Filters

Controls access to PII (Personally Identifiable Information) filter management.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>List</strong> <span title="Allows read-type access">📖</span><br /><code>settings/pii-filters/list</code></td>
    <td>Allow listing PII filters.</td>
  </tr>
  <tr>
    <td><strong>View Metrics</strong> <span title="Allows read-type access">📖</span><br /><code>settings/pii-filters/view-metrics</code></td>
    <td>Allow viewing PII filter detection metrics.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/pii-filters/edit</code></td>
    <td>Allow creating, editing, and deleting PII filters.</td>
  </tr>
  </tbody>
</table>

### Integrations

Controls access to integrations settings.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/integrations/access</code></td>
    <td>Allow viewing integrations and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/integrations/edit</code></td>
    <td>Allow creating, editing, and deleting integrations.</td>
  </tr>
  </tbody>
</table>

### MCP Servers

Controls access to custom MCP server connections.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/mcp-servers/access</code></td>
    <td>Allow viewing custom MCP server connections and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/mcp-servers/edit</code></td>
    <td>Allow creating, editing, and deleting custom MCP server connections and their credentials.</td>
  </tr>
  </tbody>
</table>

### Notifications

Controls access to notification settings, audiences, and channels.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/notifications/access</code></td>
    <td>Allow viewing notification settings, audiences, and channels.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/notifications/edit</code></td>
    <td>Allow creating, editing, and deleting notification settings, audiences, and channels.</td>
  </tr>
  </tbody>
</table>

### API

Controls access to API tokens and the API explorer.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/api/access</code></td>
    <td>Allow accessing API settings and the API explorer.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/api/edit</code></td>
    <td>Allow managing personal API tokens.</td>
  </tr>
  <tr>
    <td><strong>Manage Tokens</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/api/manage-tokens</code></td>
    <td>Allow managing account-level service tokens and integration tokens.</td>
  </tr>
  <tr>
    <td><strong>Manage User Tokens</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/api/manage-user-tokens</code></td>
    <td>Allow admins to list and revoke another user's personal API tokens.</td>
  </tr>
  </tbody>
</table>

### OAuth Clients

Controls access to OAuth 2.0 client credentials for machine-to-machine authentication.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/oauth-clients/access</code></td>
    <td>Allow viewing OAuth clients and their configurations.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/oauth-clients/edit</code></td>
    <td>Allow creating and managing agent OAuth clients.</td>
  </tr>
  <tr>
    <td><strong>Manage User Clients</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/oauth-clients/manage-user-clients</code></td>
    <td>Allow admins to list and revoke another user's OAuth clients.</td>
  </tr>
  </tbody>
</table>

#### Personal OAuth Clients

Personal (user) OAuth clients.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/oauth-clients/personal/edit</code></td>
    <td>Allow creating and managing your own personal OAuth clients.</td>
  </tr>
  </tbody>
</table>

#### Service OAuth Clients

Service-account OAuth clients.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/oauth-clients/service/edit</code></td>
    <td>Allow creating and managing service-account OAuth clients.</td>
  </tr>
  </tbody>
</table>

### Ingestion

Controls access to data ingestion settings and metrics for the account.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/ingestion/access</code></td>
    <td>Allow viewing data ingestion settings and metrics.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/ingestion/edit</code></td>
    <td>Allow editing data ingestion settings.</td>
  </tr>
  <tr>
    <td><strong>Manage Collection</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/ingestion/manage-collection</code></td>
    <td>Allow managing data collection settings, including upgrades and collection preferences.</td>
  </tr>
  </tbody>
</table>

### Secrets

Controls access to secrets management for storing sensitive credentials.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/secrets/access</code></td>
    <td>Allow viewing secrets (names/metadata only, not values). Use `settings/secrets/view-values` to view secret values.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/secrets/edit</code></td>
    <td>Allow creating, editing, and deleting secrets.</td>
  </tr>
  <tr>
    <td><strong>View Values</strong> <span title="Allows read-type access">📖</span><br /><code>settings/secrets/view-values</code></td>
    <td>Allow viewing secret values. This grants access to sensitive credential data.</td>
  </tr>
  </tbody>
</table>

### Billing

Controls access to billing information and invoices.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/billing/access</code></td>
    <td>Allow viewing billing information and invoices.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/billing/edit</code></td>
    <td>Allow modifying billing plan and contract settings.</td>
  </tr>
  </tbody>
</table>

### Alert Actions

Controls whether Monte Carlo permissions are enforced when someone acts on an alert from a connected Slack or Microsoft Teams channel.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/alert-actions/edit</code></td>
    <td>Allow changing whether acting on an alert from a connected Slack or Microsoft Teams channel requires a matching Monte Carlo user with sufficient permissions.</td>
  </tr>
  </tbody>
</table>

### Network

Controls network access control settings such as IP restrictions for data being pushed into our system via API, Integration Gateway, or other push-based services.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/network/access</code></td>
    <td>Allow viewing network access control settings.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/network/edit</code></td>
    <td>Allow managing network access control settings.</td>
  </tr>
  </tbody>
</table>

### Session

Controls account-level session timeout settings, including absolute session lifetime and inactivity timeout.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>settings/session/access</code></td>
    <td>Allow viewing session timeout settings.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>settings/session/edit</code></td>
    <td>Allow managing session timeout settings.</td>
  </tr>
  </tbody>
</table>

## MCP

Controls access to the Monte Carlo Model Context Protocol (MCP) interface used by AI agents to query and act on the account.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>mcp/access</code></td>
    <td>Allow authenticating to MCP and using read-only MCP tools.</td>
  </tr>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>mcp/edit</code></td>
    <td>Allow authenticating to MCP and using tools that modify account data or configuration.</td>
  </tr>
  </tbody>
</table>

## AI Agents

Controls access to Monte Carlo's AI agents, such as the Troubleshooting Agent and the Triage Agent.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>ai-agents/access</code></td>
    <td>Allow viewing AI agent features available to the account.</td>
  </tr>
  </tbody>
</table>

### Troubleshooting

Controls access to the Troubleshooting Agent, which investigates alerts to identify probable root causes.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>ai-agents/troubleshooting/access</code></td>
    <td>Allow running the Troubleshooting Agent on alerts and viewing its analyses.</td>
  </tr>
  </tbody>
</table>

### Triage

Controls access to the Triage Agent, which triages alerts and updates their status.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Edit</strong> <span title="Allows write-type access">✏️</span><br /><code>ai-agents/triage/edit</code></td>
    <td>Allow running the Triage Agent to triage and update alerts.</td>
  </tr>
  </tbody>
</table>

### MCP Servers

Controls whether AI agents can use the customer MCP servers registered on the account on a user's behalf.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>ai-agents/mcp-servers/access</code></td>
    <td>Allow AI agents to use the customer MCP servers that the user's authorization groups allow.</td>
  </tr>
  </tbody>
</table>

## Agent Observability

Controls access to Agent Observability, which monitors the AI agents and LLM applications in your account.

<table style={{ display: 'table', width: '100%', tableLayout: 'fixed' }}>
  <thead>
    <tr>
      <th style={{ width: '40%', textAlign: 'left' }}>Permission</th>
      <th style={{ width: '60%', textAlign: 'left' }}>Description</th>
    </tr>
  </thead>
  <tbody>
  <tr>
    <td><strong>Access</strong> <span title="Allows read-type access">📖</span><br /><code>agent-observability/access</code></td>
    <td>Allow viewing the Agent Observability area, including the list of agents, their traces and spans, and the metrics and metadata describing them.</td>
  </tr>
  <tr>
    <td><strong>Content</strong> <span title="Allows read-type access">📖</span><br /><code>agent-observability/content</code></td>
    <td>Allow viewing raw Agent Observability content. This includes conversation and trace prompts, completions, tool inputs and outputs, transcripts, and span attributes.</td>
  </tr>
  </tbody>
</table>