File size: 9,197 Bytes
e181764 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 | [
{
"role_id": "role_001",
"name": "engineering_developer",
"permissions": ["code_repo_read", "code_repo_write", "ci_cd_trigger", "staging_deploy", "jira_access", "confluence_read", "slack_engineering"],
"department": "Engineering",
"level_requirement": "L1",
"description": "Standard developer access to code repositories, CI/CD pipelines, staging environments, and engineering collaboration tools."
},
{
"role_id": "role_002",
"name": "engineering_admin",
"permissions": ["code_repo_admin", "ci_cd_admin", "staging_deploy", "production_deploy", "infra_access", "secrets_management", "jira_admin", "confluence_write", "slack_engineering", "pagerduty_admin"],
"department": "Engineering",
"level_requirement": "L4",
"description": "Administrative engineering access including production deployments, infrastructure management, and secrets management."
},
{
"role_id": "role_003",
"name": "engineering_lead",
"permissions": ["code_repo_read", "code_repo_write", "code_repo_approve", "ci_cd_trigger", "staging_deploy", "production_deploy", "jira_admin", "confluence_write", "slack_engineering", "pagerduty_oncall"],
"department": "Engineering",
"level_requirement": "L3",
"description": "Engineering lead access with code review approval rights, production deployment capabilities, and project management tools."
},
{
"role_id": "role_004",
"name": "product_viewer",
"permissions": ["jira_access", "confluence_read", "analytics_dashboard_read", "slack_product", "figma_view"],
"department": "Product",
"level_requirement": "L1",
"description": "Read-only access to product management tools, analytics dashboards, and design files."
},
{
"role_id": "role_005",
"name": "product_manager",
"permissions": ["jira_admin", "confluence_write", "analytics_dashboard_read", "analytics_dashboard_write", "slack_product", "figma_view", "figma_comment", "feature_flags_manage", "a_b_testing_admin"],
"department": "Product",
"level_requirement": "L2",
"description": "Full product management access including analytics, feature flag management, A/B testing, and project tracking administration."
},
{
"role_id": "role_006",
"name": "finance_analyst",
"permissions": ["erp_read", "financial_reports_read", "expense_system_read", "budget_dashboard_read", "slack_finance", "confluence_read"],
"department": "Finance",
"level_requirement": "L1",
"description": "Read access to financial systems, ERP data, expense reports, and budget dashboards."
},
{
"role_id": "role_007",
"name": "finance_manager",
"permissions": ["erp_read", "erp_write", "financial_reports_read", "financial_reports_write", "expense_system_admin", "budget_dashboard_admin", "payroll_read", "slack_finance", "confluence_write", "vendor_management"],
"department": "Finance",
"level_requirement": "L3",
"description": "Full finance management access including ERP write, payroll viewing, expense administration, and vendor management."
},
{
"role_id": "role_008",
"name": "hr_coordinator",
"permissions": ["hris_read", "hris_write_basic", "recruiting_ats_read", "benefits_portal_read", "slack_hr", "confluence_read", "onboarding_system_read"],
"department": "Human Resources",
"level_requirement": "L1",
"description": "Basic HR operations access for coordinating onboarding, maintaining employee records, and viewing recruiting pipelines."
},
{
"role_id": "role_009",
"name": "hr_manager",
"permissions": ["hris_read", "hris_write", "hris_admin", "recruiting_ats_admin", "benefits_portal_admin", "payroll_read", "payroll_write", "compensation_data_read", "slack_hr", "confluence_write", "onboarding_system_admin", "offboarding_system_admin", "performance_review_admin"],
"department": "Human Resources",
"level_requirement": "L3",
"description": "Full HR management access including HRIS administration, recruiting, payroll, benefits, performance reviews, and onboarding/offboarding systems."
},
{
"role_id": "role_010",
"name": "security_analyst",
"permissions": ["siem_read", "vulnerability_scanner_read", "access_logs_read", "dlp_dashboard_read", "slack_security", "confluence_read", "incident_management_read"],
"department": "Security",
"level_requirement": "L2",
"description": "Security monitoring access for reviewing SIEM alerts, vulnerability scans, access logs, and DLP incidents."
},
{
"role_id": "role_011",
"name": "security_admin",
"permissions": ["siem_admin", "vulnerability_scanner_admin", "access_logs_read", "access_management_admin", "dlp_admin", "firewall_admin", "slack_security", "confluence_write", "incident_management_admin", "secrets_management", "identity_provider_admin"],
"department": "Security",
"level_requirement": "L4",
"description": "Full security administration including SIEM, access management, DLP, firewall rules, identity provider configuration, and incident response."
},
{
"role_id": "role_012",
"name": "data_science_analyst",
"permissions": ["data_warehouse_read", "jupyter_notebooks", "ml_platform_read", "analytics_dashboard_read", "slack_data", "confluence_read", "s3_data_buckets_read"],
"department": "Data Science",
"level_requirement": "L1",
"description": "Data analysis access including data warehouse queries, Jupyter notebooks, ML platform viewing, and analytics dashboards."
},
{
"role_id": "role_013",
"name": "data_science_lead",
"permissions": ["data_warehouse_read", "data_warehouse_write", "jupyter_notebooks", "ml_platform_admin", "analytics_dashboard_write", "gpu_cluster_access", "slack_data", "confluence_write", "s3_data_buckets_read", "s3_data_buckets_write", "model_registry_admin"],
"department": "Data Science",
"level_requirement": "L3",
"description": "Advanced data science access including data warehouse writes, ML platform administration, GPU cluster usage, and model registry management."
},
{
"role_id": "role_014",
"name": "sales_crm_user",
"permissions": ["crm_read", "crm_write", "sales_dashboard_read", "email_sequences", "slack_sales", "confluence_read", "contract_management_read"],
"department": "Sales",
"level_requirement": "L1",
"description": "Standard sales access to CRM, sales dashboards, email outreach tools, and contract viewing."
},
{
"role_id": "role_015",
"name": "sales_manager",
"permissions": ["crm_admin", "sales_dashboard_admin", "email_sequences", "commission_reports_read", "slack_sales", "confluence_write", "contract_management_write", "quota_management", "territory_management"],
"department": "Sales",
"level_requirement": "L3",
"description": "Sales management access including CRM administration, commission reports, quota setting, and territory management."
},
{
"role_id": "role_016",
"name": "marketing_specialist",
"permissions": ["marketing_automation_read", "marketing_automation_write", "social_media_management", "analytics_dashboard_read", "slack_marketing", "confluence_read", "cms_write", "design_tools_access"],
"department": "Marketing",
"level_requirement": "L1",
"description": "Marketing operations access including automation platforms, social media management, CMS, and analytics."
},
{
"role_id": "role_017",
"name": "customer_support_agent",
"permissions": ["ticketing_system_read", "ticketing_system_write", "knowledge_base_read", "crm_read", "slack_support", "confluence_read", "phone_system_access"],
"department": "Customer Support",
"level_requirement": "L1",
"description": "Customer support agent access to ticketing system, knowledge base, CRM viewing, and phone system."
},
{
"role_id": "role_018",
"name": "design_contributor",
"permissions": ["figma_edit", "design_system_read", "design_system_write", "slack_design", "confluence_read", "jira_access", "asset_library_access"],
"department": "Design",
"level_requirement": "L1",
"description": "Design team access including Figma editing, design system contributions, and asset library management."
},
{
"role_id": "role_019",
"name": "legal_counsel",
"permissions": ["contract_management_read", "contract_management_write", "legal_document_vault", "compliance_dashboard_read", "e_discovery_access", "slack_legal", "confluence_write", "vendor_management"],
"department": "Legal",
"level_requirement": "L2",
"description": "Legal team access to contract management, document vault, compliance monitoring, e-discovery tools, and vendor management."
},
{
"role_id": "role_020",
"name": "general_employee",
"permissions": ["email_access", "slack_general", "confluence_read", "hris_self_service", "benefits_portal_self_service", "expense_system_submit", "learning_platform_access"],
"department": "all",
"level_requirement": "L1",
"description": "Baseline access granted to all employees including email, Slack, self-service HR portal, benefits, expense submission, and learning platform."
}
]
|