# Talend Management Console

Predefined roles and permissions are ready to use, and some of them consume seats.

## Predefined roles in Talend Management Console and the permissions they have

| Role | Permission names and IDs | Allowed operations |
| --- | --- | --- |
| Security Administrator | <ul> <li> <p><span>Users - Manage</span></p> <p><span>TMC_USER_MANAGEMENT</span></p> </li> <li> <p><span>Roles - Manage</span></p> <p><span>TMC_ROLE_MANAGEMENT</span></p> </li> <li> <p><span><span>Talend</span> groups - Manage</span></p> <p><span>TMC_GROUP_MANAGEMENT</span></p> </li> <li> <p><span>Subscription - Manage</span></p> <p><span>TMC_SUBSCRIPTION_MANAGEMENT</span></p> </li> <li> <p><span>SSO - Manage</span></p> <p><span>TMC_SSO_MANAGEMENT</span></p> </li> <li> <p><span>Service Account - Manage</span></p> <p><span>TMC_SERVICE_ACCOUNT_MANAGEMENT</span></p> </li> <li><span>Audit logs -                                    View</span><p><span>AUDIT_LOGS_VIEW</span></p> </li> </ul> | <ul> <li>Manage users, roles, and <span>Talend</span> groups</li> <li>Manage service accounts</li> <li>Access subscription information</li> <li>Configure single sign-on </li> </ul> |
| Project Administrator | <ul> <li> <p><span>Studio projects - Manage</span></p> <p><span>TMC_PROJECT_MANAGEMENT</span></p> </li> <li> <p><span>Artifact repository - Configuration</span></p> <p><span>TMC_CONFIGURATION_NEXUS_USERLIBS</span></p> </li> </ul> | <ul> <li>Manage Studio projects (including project authorizations)</li> <li>Set up user libraries in the artifact repository</li> </ul> |
| Environment Administrator | <ul> <li> <p><span>Promotion - Manage</span></p> <p><span>TMC_PIPELINE_MANAGEMENT</span></p> </li> <li> <p><span>Environments - Manage</span></p> <p><span>TMC_ENVIRONMENT_MANAGEMENT</span></p> </li> <li> <p><span>Promotion - Start</span></p> <p><span>TMC_PROMOTION_EXECUTION</span></p> </li> </ul> | <ul> <li>Manage environments, spaces, and promotions </li> <li>Execute promotions</li> </ul> |
| Infrastructure Administrator | <ul> <li> <p><span>Engines - Manage</span></p> <p><span>TMC_CLUSTER_MANAGEMENT</span></p> </li> <li> <p><span>Static IP - Manage</span></p> <p><span>TMC_STATIC_IP_MANAGEMENT</span></p> </li> <li> <p><span>Manage Cloud Configurations</span></p> <p><span>TMC_CLOUD_CONFIGURATION_MANAGEMENT</span></p> </li> <li> <p><span>Run Profiles - Manage</span></p> <p><span>TMC_RUN_PROFILE_MANAGEMENT</span></p> </li> </ul> | <ul> <li>Create, update, and delete <span>Remote Engine Gen2</span></li> <li>Manage remote engines and remote engine clusters</li> <li>Configure static IP addresses</li> <li>Export logs</li> </ul> |
| Operator | <ul> <li> <p><span>Tasks and Plans - Edit</span></p> <p><span>TMC_OPERATOR</span></p> </li> <li> <p><span>Run Profiles - Manage</span></p> <p><span>TMC_RUN_PROFILE_MANAGEMENT</span></p> </li> </ul> | <ul> <li>Publish Jobs, Routes, and data services from <span>Talend Studio</span> <sup>*</sup></li> <li>Publish pipelines from <span>Talend Cloud Pipeline Designer</span> </li> <li>Configure, schedule, execute, and monitor tasks and                                 plans                           </li> <li>Create, update, and delete pipeline run profiles</li> <li>Configure run profiles for remote engines</li> </ul> |
| Assets Manager | Studio connections and Studio resources - Edit<br><br>TMC\_CONNECTION\_RESOURCE\_EDIT | <ul> <li>View Studio connections and resources with any space permission                              assigned</li> <li>Create, edit, and delete Studio connections and resources with                                 <span>Editor (Author)</span> space permission                              assigned</li> <li>Use Studio connections and resources in executions with                                 <span>Editor (Author)</span> or <span>Operator                                 (Execute)</span> space permission assigned</li> </ul><br><br>For more information, see [Migrating the Manage space<br>permission](https://help.qlik.com/talend/en-US/management-console-user-guide/Cloud/tmc-qmc-permission-alignment-concept). |
| Integration Developer | <ul> <li> <p><span>Studio - Develop</span></p> <p><span>STUDIO_ENTITLEMENT_STUDIO_DEVELOPER</span></p> </li> </ul> | Publish from Talend Studio. For more information, see [Talend Studio](https://help.qlik.com/talend/r/en-US/Cloud/management-console-user-guide/roles-studio). |

## Engines - Use permission

The Engines - Use permission (Permission ID: TMC\_ENGINE\_USE) entitles users to:

* View and use Talend Remote Engine instances.
* Access run profiles.
* Execute tasks.

When a Talend Remote Engine instance is allocated to custom spaces:

* Associate Engines - Use with the space permission Use engines to restrict the use of the engine to specific accounts.

* The space permission Use engines combines Operator (Execute) and Viewer (View) permissions.

* Users with the individual permission Engines - Use can only have the space permission Use engines.

  Users with the Tasks and Plans - Edit or the Studio connections and Studio resources – Edit user permission cannot be assigned the Use Engines space permission.

* For further information about the space permission Use engines, see [Managing spaces](https://help.qlik.com/talend/en-US/management-console-user-guide/Cloud/tmc-workspaces).

The Engines - Use permission does not consume a seat in Talend Management Console. This way, it allows a non-Operator user to use Talend Remote Engine without having to consume seats.

## Roles and permissions consuming Seats

By default, the following roles consume a seat in Talend Management Console:

* Environment Administrator
* Infrastructure Administrator
* Operator

Each user with at least one of the following individual permissions consumes a seat in Talend Management Console:

* Permissions

  The following table presents the names and IDs of permissions which consume a seat in Talend Management ConsoleThe following table presents the names and IDs of permissions which consume a seat in Talend Management ConsoleTalend Management Console
  | Permission names | Permission IDs |
  | --- | --- |
  | Static IP - Manage | TMC\_STATIC\_IP\_MANAGEMENT |
  | Promotion - Manage | TMC\_PIPELINE\_MANAGEMENT |
  | Promotion - Start | TMC\_PROMOTION\_EXECUTION |
  | Tasks and Plans - Edit | TMC\_OPERATOR |
  | Studio connections and Studio resources - Edit | TMC\_CONNECTION\_RESOURCE\_EDIT |
  | Engines - Manage | TMC\_CLUSTER\_MANAGEMENT |
  | Environments - Manage | TMC\_ENVIRONMENT\_MANAGEMENT |

Assigning seat-consuming permissions to other roles will result in seat consumption.