Private tenant

In a private tenant, folders created on Spark are only visible to the user who created them until explicitly shared with other users and user groups. The exception is for members of the supervisor:pf group, who have access to see all folders and services in Spark by default.

The private tenant feature is best used in conjunction with custom User groups that are aligned with regional or functional responsibilities in an organization.

A tenant can only be configured to be a private tenant at the initial setup. Once a tenant is either private or shared, it cannot be converted to another type. This setting can be verified in the User menu.

Spark entity permission types

Permissions in Spark are applied at a folder level from the Home screen. Entities within the folder will inherit the same access as the parent folder.

The table describes the required permissions to perform key functions in Spark. Most actions require combined permissions. For example, to delete a folder, both read and delete permissions abd required.

This table is meant to be read from left to right.

Depending on your screen and browser, some of the columns of the table may be hidden. Scroll right to see the complete details.

Entity	Action	create	read	update	delete	execute
Folder	Clone		✅
	Download		✅
	Delete		✅		✅
	Edit		✅	✅
	Favorite	✅	✅	✅
	New folder	✅	✅
	View		✅
Service	Add service	✅	✅	✅
	Add version	✅	✅	✅
	Analyze with AI		✅
	API Call History		✅
	API Tester		✅			✅
	Compare versions		✅
	Delete		✅		✅
	Delete service version		✅		✅
	Deployment Request		✅
	Download		✅
	/batch /execute /metadata /SPARK_XCALL /validation		✅* see execute only permissions			✅
	Edit service version		✅	✅
	Favorite	✅	✅	✅
	Recompile	✅	✅	✅
	Restore version	✅	✅	✅
	Update service properties		✅	✅
	View		✅
Transform	Add	✅	✅	✅
	Delete		✅		✅
	Execute		✅			✅
	Edit		✅	✅
	Update		✅	✅
Testbed	Add additional test cases		✅	✅
	Aggregate	✅	✅			✅
	Delete		✅		✅
	Download		✅
	Favorite	✅	✅	✅
	Run	✅	✅			✅
	Test case generation	✅	✅			✅
	Upload	✅	✅
	View		✅
Testbed results	Compare results		✅
	Delete		✅		✅
	Download		✅
	Upload test results	✅	✅
	View		✅
Document section	Add	✅	✅	✅
	Delete		✅	✅	✅
	Edit	✅	✅	✅
	View		✅
Document	Delete		✅		✅
	Download		✅
	Move to	✅	✅	✅
	New document	✅	✅	✅
	Update		✅	✅
	View		✅

supervisor role

When a new folder is created, the user group supervisor:pf is assigned to the folder by default with all of the permission types applied. This means by default, users included in the supervisor:pf user group have access to all folders and services in Spark.

If the user who creates the folder is a member of other user groups, the supervisors of those user groups will also be granted access to manage this folder. For example, if a user who is a member of user:team3 creates a folder, the folder will also be accessible by the user group supervisor:team3.

execute only permissions

This feature is only enabled on certain environmetns and tenants. Contact support for more information about this feature.

Make calls to /batch, /execute, /metadata, SPARK_XCALL(), /validation with only execute permissions and without read permissions.