Project Permissions
A project is an independent entity and corresponds to a folder for organizing your assets. A project holds all the assets created as a part of that project by the logged-in user, along with the configurations associated with the assets. Project permissions are used to associate permissions with projects.
You associate permissions with projects from the
Settings 
> Project Permissions > Add New Project Permission page.
Integration Cloud provides a system-generated Developer project permission profile in your tenant. Any new project created is automatically associated with the Developer project permission profile. This profile has permissions to create, update, delete, and execute all assets. You cannot edit or delete this system-generated project permission profile. If a project permission profile is associated with a user on the user profile page, the user can perform only the permitted tasks in the mapped project.
If you are an existing tenant:
Your user's
Access Profile controls global permissions as well as permissions for the
Default project.
Your user's Project Permissions profile control permissions for other projects.
All existing user profiles will be associated with the
Developer project permission profile.
All projects created have the
Developer project permission profile associated with it.
All existing assets will be available in the
Default project.
Manage the permissions for existing assets inside the
Default project from the
Project Permissions for Default Project section under
Settings > Access Profiles > Administrative Permissions.
Manage the permissions for new assets created inside the
Default project from the
Project Permissions for Default Project section under
Settings > Access Profiles > Administrative Permissions.
If you create a new project, you have to assign the project permissions from the
Settings > Project Permissions > Add New Project Permission page.
If you are a new tenant:
The
Default project is not available. There are no existing assets. Your user's
Access Profile controls only global permissions.
The Administrator will be associated with the
Developer project permission profile and can assign a project permission profile to a new user.
All projects created have the
Developer project permission profile associated with it.
If you create a new project, you have to assign the project permissions from the
Settings > Project Permissions > Add New Project Permission page.
Once you log in, from the
Integration Cloud navigation bar, click
Settings > Project Permissions > Add New Project Permission. Select a project and then click the add icon
to add the project in the panel. Then assign the relevant permissions to the selected project . You can select another project and assign the permissions to the selected project. Click
Add.
Note: If you associate the project permission profile to a user on the user profile page, the user can perform only the permitted tasks in each mapped project.
Example 1
A user is assigned to two project permission profiles A and B in the user profile. Project permission profile A has the Execute Integration permission in Project X but Project permission profile B does not have the Execute Integration permission for the same Project X. The user will still be able to execute the Integration.
Example 2
In this example, we will see how you will allow an existing user U1 to create, update, delete, and execute Integrations for the Project P1 but not for Project P2.
1. You must have the Access Control permission under Access Profiles > Administrative Permissions.
2. Create Project P1 and Project P2.
3. Create a new Project Permission profile PP1 under Settings > Project Permissions > Add New Project Permission.
4. On the Add New Project Permission page, add Project P1 in the mapped projects list. Assign the create, update, delete, and execute Integration permissions to the mapped Project P1.
5. Do not map Project P2.
6. Go to the Basic tab of user U1 and select only PP1.
So when U1 logs in, U1 will only be able to create, update, delete, and execute Integrations for the Project P1 but not for Project P2.
