Nexus IQ access requirements
Access to Nexus IQ under SHIP-HATS is controlled through a two-layer model:
- Sonatype licence – Grants access to the Nexus IQ platform.
- Application-level roles and permissions – Determine which Nexus IQ applications a user can access and what actions they can perform.
Access scenarios
| Licence assigned | Application role granted | Result |
|---|---|---|
| ❌ No | ❌ No | No access to Nexus IQ |
| ✅ Yes | ❌ No | Can log in to Nexus IQ but cannot access any applications |
| ❌ No | ✅ Yes | No access (licence required) |
| ✅ Yes | ✅ Yes | Can access the application and perform actions based on assigned role |
Important notes
- Assigning application roles does not automatically provision a Sonatype licence.
- Provisioning a Sonatype licence does not automatically grant access to any Nexus IQ application.
- Both a licence and an application role are required to evaluate applications or view policy violations.
- Removing the Sonatype licence revokes access to Nexus IQ entirely.
