Nexus IQ roles and permissions
User roles determine the actions a user can perform in Nexus IQ.
Nexus IQ provides system-defined roles and permissions. In SHIP-HATS, these roles are configured to support agency workflows.
The following table lists the available roles and permissions.
| Role | Permissions |
|---|---|
| Application Security Tester | Reviews policy violations, tests security vulnerabilities, and updates vulnerability analysis results. |
| Application Evaluator | Evaluates applications and views policy violation summary results. |
| Component Evaluator | Evaluates individual components and views policy violation results for a specific application. |
| Developer | Views information for assigned organisations or applications. |
| Legal Reviewer | Reviews legal obligations related to component licences. |
| Owner with Claim Components | Manages assigned organisations, applications, policies, and policy violations, and can claim components. |
Note
The Project Admin (PA) role in Console is assigned the Owner with Claim Components role by default.
For more details, see the Sonatype documentation on
Nexus IQ role management.
