> For the complete documentation index, see [llms.txt](https://docs.coherent.global/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.coherent.global/identity-and-access-management/private-tenant.md).

# Private tenant

In a private tenant, folders created on Spark are only visible to the user who created them until explicitly shared with other users and user groups. The exception is for members of the `supervisor:pf` group, who have access to see all folders and services in Spark by default.

The private tenant feature is best used in conjunction with custom [User groups](/identity-and-access-management/user-groups.md) that are aligned with regional or functional responsibilities in an organization.

A tenant can only be configured to be a private tenant at the initial setup. Once a tenant is either private or shared, it cannot be converted to another type. This setting can be verified in the [Navigation menu](/navigation/navigation-menu.md#user-menu).

## Spark entity permission types

Permissions in Spark are applied at a folder level from the [Home](/navigation/home.md) screen. Entities within the folder will inherit the same access as the parent folder.

The table describes the required permissions to perform key functions in Spark. Most actions require combined permissions. For example, to delete a folder, both `read` and `delete` permissions abd required.

{% hint style="info" %}
This table is meant to be read from left to right.

Depending on your screen and browser, some of the columns of the table may be hidden. Scroll right to see the complete details.
{% endhint %}

<table data-full-width="true"><thead><tr><th>Entity</th><th>Action</th><th>create</th><th>read</th><th>update</th><th>delete</th><th>execute</th></tr></thead><tbody><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Folder</td><td>Clone</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Download</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Delete</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Edit</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Favorite</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>New folder</td><td>✅</td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>View</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Service</td><td>Add service</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Add version</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Analyze with AI</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>API Call History</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>API Tester</td><td></td><td>✅</td><td></td><td></td><td>✅</td></tr><tr><td></td><td>Compare versions</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Delete</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Delete service version</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Deployment Request</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Download</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td><p><code>/batch</code></p><p><code>/execute</code></p><p><code>/metadata</code></p><p><code>/SPARK_XCALL</code></p><p><code>/validation</code></p></td><td></td><td>✅*<br>see <a data-mention href="#execute-only-permissions">#execute-only-permissions</a></td><td></td><td></td><td>✅</td></tr><tr><td></td><td>Edit service version</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Favorite</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Recompile</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Restore version</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Update service properties</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>View</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Transform</td><td>Add</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Delete</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Execute</td><td></td><td>✅</td><td></td><td></td><td>✅</td></tr><tr><td></td><td>Edit</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Update</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Testbed</td><td>Add additional test cases</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Aggregate</td><td>✅</td><td>✅</td><td></td><td></td><td>✅</td></tr><tr><td></td><td>Delete</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Download</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Favorite</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Run</td><td>✅</td><td>✅</td><td></td><td></td><td>✅</td></tr><tr><td></td><td>Test case generation</td><td>✅</td><td>✅</td><td></td><td></td><td>✅</td></tr><tr><td></td><td>Upload</td><td>✅</td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>View</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Testbed results</td><td>Compare results</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Delete</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Download</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Upload test results</td><td>✅</td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>View</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Document section</td><td>Add</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Delete</td><td></td><td>✅</td><td>✅</td><td>✅</td><td></td></tr><tr><td></td><td>Edit</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>View</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr><td>Document</td><td>Delete</td><td></td><td>✅</td><td></td><td>✅</td><td></td></tr><tr><td></td><td>Download</td><td></td><td>✅</td><td></td><td></td><td></td></tr><tr><td></td><td>Move to</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>New document</td><td>✅</td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>Update</td><td></td><td>✅</td><td>✅</td><td></td><td></td></tr><tr><td></td><td>View</td><td></td><td>✅</td><td></td><td></td><td></td></tr></tbody></table>

### supervisor role

When a new folder is created, the user group `supervisor:pf` is assigned to the folder by default with all of the permission types applied. This means by default, users included in the `supervisor:pf` user group have access to all folders and services in Spark.

If the user who creates the folder is a member of other user groups, the supervisors of those user groups will also be granted access to manage this folder. For example, if a user who is a member of `user:team3` creates a folder, the folder will also be accessible by the user group `supervisor:team3`.

### `execute` only permissions

{% hint style="info" %}
This feature is only enabled on certain environmetns and tenants. [Contact support](/support/contact-support.md) for more information about this feature.
{% endhint %}

Make calls to `/batch`, `/execute`, `/metadata`, `SPARK_XCALL()`, `/validation` with only `execute` permissions and without `read` permissions.