FOD roles and permissions reference
The following table lists the roles available in Fortify on Demand (FOD) and the permissions granted to each role.
Roles follow a hierarchical permission model. Higher roles inherit permissions from lower roles. For details on role inheritance and automatic GT-Manager assignment, see FOD role and permission model.
| Role | Permissions |
|---|---|
| View-Only | - View general application information - View application versions |
| GT-Report-Upload-And-Generate-SAST-and-DAST | - Run SAST scans - Run DAST scans Reserved for FOD Service Account only |
| GT-Application Security Tester | - Edit issues - Create reports |
| GT-Security Lead | - Audit issues |
| GT-Manager | - Manage applications |
