System roles and permissions
This topic describes system-level permissions for Subscription Admins (SAs) and Technical Admins (TAs). For a full roles overview, see SHIP-HATS roles and responsibilities.
Key rules
- Only SAs can create systems and assign Technical Admins
- Each system can have up to three TAs
- TAs can manage only the systems they are assigned to
Permissions
| Action | Primary SA | Secondary SA | Technical Admin (TA) |
|---|---|---|---|
| Create system | ✅ | ✅ | ❌ |
| Edit system description | ✅ | ✅ | ✅ (assigned only) |
| Add or remove DGP IDs | ✅ | ✅ | ✅ (assigned only) |
| Assign or remove Technical Admins | ✅ | ✅ | ❌ |
| Delete system | ✅ | ✅ | ✅ (assigned only) |
| View system | ✅ | ✅ | ✅ (assigned only) |
