# Platform Status Permissions

Source: https://userguide.qualytics.io/settings/status/deep-dive/permissions/

This page covers the roles required to view and manage the Platform Status page, including Dataplane restart and Dataplane Diagnostics.

> **Note: Workspace-Level Only**
>
> The Status page is a global platform feature. It is not scoped to individual datastores or teams, so it is controlled **exclusively by User Roles**. Team permissions do not apply.

## User Roles (Workspace-Level)

| Action | Member | Manager | Admin |
| --- | --- | --- | --- |
| Access the Status page | Not allowed | Allowed | Allowed |
| View the Deployment and Components cards | Not allowed | Allowed | Allowed |
| View the License card | Not allowed | Not allowed | Allowed |
| View the Modules card | Not allowed | Allowed | Allowed |
| Ask an Admin to enable a module from the Modules card | Not allowed | Allowed | Not allowed |
| See how many people asked for a module | Not allowed | Not allowed | Allowed |
| View the Dataplane Configuration subtab | Not allowed | Allowed | Allowed |
| Refresh Status Summary | Not allowed | Allowed | Allowed |
| Copy Status Summary | Not allowed | Allowed | Allowed |
| Open the Dataplane Diagnostics subtab | Not allowed | Not allowed | Allowed |
| Capture and download a diagnostics report | Not allowed | Not allowed | Allowed |
| Restart Dataplane | Not allowed | Not allowed | Allowed |

## How Permissions Work

To **view the Status page**, a user needs the **Manager** or **Admin** role. Users with the Member role are redirected away from the page.

To **manage or inspect the Dataplane**, meaning restart it or open its Diagnostics subtab, a user needs the **Admin** role. Both are gated by the same rule, so a Manager sees neither the **Restart** button nor the **Diagnostics** subtab.

> **Info: Admin Full Access**
>
> Users with the **Admin** role have unrestricted access to every Status page feature.

## What Each Role Sees

| ROLE | WHAT THEY SEE |
| --- | --- |
| Member | Cannot open the Status page. The browser redirects to the Datastores page. |
| Manager | The Deployment, Components, Modules, and Dataplane cards, with **Refresh** and **Copy Summary**. The License card is not displayed. On the Modules card, a disabled module offers **Ask admin to enable**. The Dataplane card shows only its **Configuration** subtab, with no **Restart** button. |
| Admin | Everything a Manager sees, plus the **Diagnostics** subtab on the Dataplane card and the **Restart** button. On the Modules card, Admins see how many people asked for each disabled module and **Contact Qualytics to enable more** in place of **Ask admin to enable**. |

## API Permissions

The Status endpoints do not all match the page's own requirement. The status endpoint is **public**, so a monitoring probe can read platform health without credentials. Platform info needs at least the **Member** role, and the diagnostics and restart endpoints require **Admin**.

| Endpoint | Method | Required Role | Description |
| --- | --- | --- | --- |
| `/` | GET | Member | Retrieve platform info: version, cloud, engine, and size. |
| `/status` | GET | Public | Retrieve platform health: database, RabbitMQ, and the Dataplane report. |
| `/dataplane/diagnostics` | GET | Admin | Capture and return a live Dataplane diagnostics report. |
| `/admin/restart` | PUT | Admin | Restart the Dataplane. |
| `/modules` | GET | Member | List the product modules and whether each is enabled. |
| `/modules/{code}/requests` | POST | Member | Ask the organization's Admins to enable a module that isn't enabled. Admins cannot send requests. |

> **Note**
>
> `GET /api/status` is public so the sign-in page can report a platform problem before anyone authenticates. Treat its response as readable by anyone who can reach the deployment. It carries software versions and resource allocation, but no datastore names, credentials, or data.

> **Info: Full Permissions Reference**
>
> For the complete User Roles matrix across all Qualytics features, see the [User Roles](https://userguide.qualytics.io/settings/access/users/roles/overview/) page.

*Last updated: October 28, 2026.*