# Permissions

The following table shows a complete list of permissions granted per role. You can read about how to grant the various roles on the [Managing Access Rights](https://docs.developer.disruptive-technologies.com/service-accounts/managing-access-rights) page.

* Permissions granted by the `organization.admin` implies elevated permissions for all projects, devices, and services within the organization it was granted for.

| Permission                  | <p>project<br>.user</p> | <p>project<br>.developer</p> | <p>project<br>.admin</p> | <p>organization<br>.admin</p> |
| --------------------------- | :---------------------: | :--------------------------: | :----------------------: | :---------------------------: |
| `dataconnector.create`      |                         |               X              |             X            |               X               |
| `dataconnector.read`        |            X            |               X              |             X            |               X               |
| `dataconnector.update`      |                         |               X              |             X            |               X               |
| `dataconnector.delete`      |                         |               X              |             X            |               X               |
| `device.read`               |            X            |               X              |             X            |               X               |
| `device.update`             |                         |               X              |             X            |               X               |
| `device.transfer`           |                         |                              |             X            |               X               |
| `emulator.create`           |                         |               X              |             X            |               X               |
| `emulator.read`             |            X            |               X              |             X            |               X               |
| `emulator.update`           |                         |               X              |             X            |               X               |
| `emulator.delete`           |                         |               X              |             X            |               X               |
| `membership.create`         |                         |                              |             X            |               X               |
| `membership.read`           |            X            |               X              |             X            |               X               |
| `membership.update`         |                         |                              |             X            |               X               |
| `membership.delete`         |                         |                              |             X            |               X               |
| `organization.read`         |                         |                              |                          |               X               |
| `organization.update`       |                         |                              |                          |               X               |
| `project.create`            |                         |                              |                          |               X               |
| `project.read`              |            X            |               X              |             X            |               X               |
| `project.update`            |                         |                              |             X            |               X               |
| `project.delete`            |                         |                              |             X            |               X               |
| `serviceaccount.create`     |                         |                              |             X            |               X               |
| `serviceaccount.read`       |            X            |               X              |             X            |               X               |
| `serviceaccount.update`     |                         |                              |             X            |               X               |
| `serviceaccount.delete`     |                         |                              |             X            |               X               |
| `serviceaccount.key.create` |                         |                              |             X            |               X               |
| `serviceaccount.key.read`   |            X            |               X              |             X            |               X               |
| `serviceaccount.key.delete` |                         |                              |             X            |               X               |