Roles & Permissions

Role Hierarchy

Ingate uses a linear role hierarchy. Each role is assigned a numeric level, and higher roles automatically inherit all permissions of lower roles.

A user with role level N can perform any action that requires level N or below. For example, an admin (level 2) can do everything a member (level 1) and viewer (level 0) can do.

Permissions by Resource

The table below shows the minimum role required for read and write access to each resource. A dash means that operation is not applicable to the resource.

Error Responses

When a request lacks valid authentication or the authenticated user does not have the required role, the API returns 403 Forbidden:

{
  "error": "authentication required",
  "error_code": "forbidden"
}

{
  "error": "insufficient permissions",
  "error_code": "forbidden",
  "required_role": "admin"
}