Tanzu Platform Self-Managed 10.1

Cloud Foundry Foundation scope summary

Last Updated March 03, 2025

This topic gives you a summary of the level of access each role has at the Cloud Foundry Foundation scope in Tanzu Platform.

Business Applications

Tanzu Platform pageFeatureAdminOperatorViewer
Applications > Business ApplicationsView business applicationsNoNoNo
Applications > Business ApplicationsManage business applications (create/update/delete)NoNoNo
Applications > AppsView appsNoNoNo

Spring

Tanzu Platform pageFeatureAdminOperatorViewer
Assessment Center > AssessmentCreate new Spring health assessments by uploading a software bill of materials (SBOM)NoNoNo
Assessment Center > ResultsView the summary of the assessment, the list of libraries, and the download resultsNoNoNo
Assessment Center > ResultsRerun the assessmentNoNoNo
Policies > Application PoliciesView application policiesNoNoNo
Policies > Application PoliciesManage application policies (create/edit/delete)NoNoNo
Policies > Application PoliciesActivate and deactivate application policiesNoNoNo
Policies > Application PoliciesRun application policies on-demand (Run Now)NoNoNo
Policies > Application PoliciesView and filter application policies findingsNoNoNo
Policies > Application PoliciesSuppress application policies findingsNoNoNo
Administration > Repositories > GitView the list of Git repositoriesNoNoNo
Administration > Repositories > GitManage Git repositoriesNoNoNo

Kubernetes Spaces

Tanzu Platform pageFeatureAdminOperatorViewer
Developer Tools > RepositoriesView the list of Git repositories and their details including libraries and assessmentNoNoNo
Developer Tools > RepositoriesAnalyze Git repositories on-demand and by scheduleNoNoNo
Developer Tools > BuildView application buildsNoNoNo
Spaces > OverviewView the list and details of Spaces including ContainerApps, Services, ContainerApps Bindings, ContainerApps Logs, Kubernetes Services, Ingress & Egress, Network Topology, Space configurationNoNoNo
Spaces > OverviewAdd SpacesNoNoNo
Spaces > OverviewEdit or delete a SpaceNoNoNo
Spaces > OverviewView and download the configuration YAML for a SpaceNoNoNo
Spaces > Overview > ApplicationsManage ContainerApps including scale, stop, and restart (add/edit/delete)NoNoNo
Spaces > Overview > ServicesManage services and application bindings (add/edit/delete)NoNoNo
Spaces > Overview > Ingress & EgressManage ingress and egress in a Space (add/edit/delete)NoNoNo
Spaces > Overview > Applications > Overview > SecretsView SecretsNoNoNo
Spaces > Overview > Applications > Overview > SecretsManage Secrets (add/edit/delete)NoNoNo
Spaces > ProfilesView the list and details of ProfilesNoNoNo
Spaces > ProfilesView and download the Profile YAMLNoNoNo
Spaces > ProfilesManage Profiles (add/edit/delete)NoNoNo
Spaces > Profiles > TraitsView the list and details of TraitsNoNoNo
Spaces > Profiles > TraitsView and download the Trait package YAML for SpacesNoNoNo
Spaces > Profiles > TraitsManage Traits (add/edit/delete)NoNoNo
Spaces > CapabilitiesView the list and details of available CapabilitiesNoNoNo
Spaces > CapabilitiesInstall new CapabilitiesNoNoNo
Spaces > CapabilitiesView the list and details of installed CapabilitiesNoNoNo
Spaces > CapabilitiesEdit and change version and uninstall CapabilitiesNoNoNo
Spaces > CapabilitiesView the list and details of packagesNoNoNo
Spaces > CapabilitiesPerform actions on PackagesNoNoNo
Spaces > Availability TargetsView the list and details of Availability TargetsNoNoNo
Spaces > Availability TargetsView and download the configuration YAML for Availability TargetsNoNoNo
Spaces > Availability TargetsManage Availability Targets (create/edit/delete)NoNoNo
Administration > Infrastructure configuration > Networking > DomainsView the list and details of domainsNoNoNo
Administration > Infrastructure configuration > Networking > DomainsManage domains (add/edit/delete)NoNoNo
Administration > Infrastructure configuration > Networking > DomainsManage domain bindings (add/edit/delete)NoNoNo
Administration > Infrastructure configuration > Networking > DomainsView the list and details of domain bindingsNoNoNo
Administration > Infrastructure configuration > Networking > DNS ProvidersView the list and details of DNS providersNoNoNo
Administration > Infrastructure configuration > Networking > DNS ProvidersManage DNS providers (add/edit/delete)NoNoNo
Administration > Infrastructure configuration > Networking > Certificate ProvidersView the list and details of certificate providersNoNoNo
Administration > Infrastructure configuration > Networking > Certificate ProvidersManage certificate providers (add/edit/delete)NoNoNo
Infrastructure > Kubernetes ClustersView the list and details of cluster groupsNoNoNo
Infrastructure > Kubernetes ClustersCreate cluster groupsNoNoNo
Infrastructure > Kubernetes ClustersView the list and details of clusters (overview/nodes/pods/node pools/events)NoNoNo
Infrastructure > Kubernetes ClustersManage node pools (add/edit)NoNoNo
Infrastructure > Kubernetes ClustersRead-only access to the clusterNoNoNo
Infrastructure > Kubernetes ClustersEdit, move, delete, or unmanage a clusterNoNoNo
Infrastructure > Kubernetes ClustersCreate an EKS clusterNoNoNo
Infrastructure > Kubernetes ClustersManage an EKS clusterNoNoNo
Infrastructure > Kubernetes ClustersAttach a self-managed clusterNoNoNo
Policies > Space PoliciesView the list and details of Space policiesNoNoNo
Policies > Space PoliciesCreate and edit configuration and delete SpacesNoNoNo
Policies > Space PoliciesView the Space resource limit policyNoNoNo
Policies > Space PoliciesEdit and delete Space a resource limit policyNoNoNo

Cloud Foundry

Tanzu Platform pageFeatureAdminOperatorViewer
Infrastructure > FoundationsView the list and details of Cloud Foundry foundationsNoNoNo
Administration > Infrastructure configuration > Cloud Foundry Foundations (TAS Foundation Collector)View the list and details of configured Cloud Foundry collectorsNoNoNo
Administration > Infrastructure configuration > Cloud Foundry Foundations (TAS Foundation Collector)Manage Cloud Foundry collectors (add/edit/delete)NoNoNo

Software Catalog

Tanzu Platform pageFeatureAdminOperatorViewer
Software CatalogView the list of software cataloguesYesYesYes
Software CatalogView individual catalog item pagesNoNoNo
Bitnami Application CatalogueView the list and details for Bitnami application catalogueNoNoNo

Observability

Tanzu Platform pageFeatureAdminOperatorViewer
Administration > Alerting and notification > AlertsCreate a new alert definition policyNoNoNo
Administration > Alerting and notification > AlertsUpdate an existing alert definition policyNoNoNo
Administration > Alerting and notification > AlertsView all alert definition policies and their detailsNoNoNo
Administration > Alerting and notification > Alerts > MetricsQuery statsNoNoNo
Administration > Alerting and notification > Alerts > LogsView logsNoNoNo
Administration > Alerting and notification > Alerts > LogsView the log patternsNoNoNo
Administration > Alerting and notification > Alerts > LogsView the exceptionsNoNoNo

Core Platform

Tanzu Platform pageFeatureAdminOperatorViewer
HomeView the dashboard, switch dashboard, and add or remove widgetsNoNoNo
HomeManage dashboards (create/edit/delete/assign/scope)NoNoNo
Administration > Alerting and notification > DashboardsManage dashboards (create/edit/delete)NoNoNo
Administration > Alerting and notification > DashboardsShare dashboardsNoNoNo
Infrastructure > SearchUse search query for inventory (write/save/delete). View and export search results.YesYesYes
Infrastructure > SearchEdit layout for resource detailsYesYesYes
Administration > Identity and access > Roles and permissionsManage users and their roles for a scope (add/edit/delete)YesNoNo
Administration > Infrastructure accounts > VCF instancesView the list and details of VCF collectorsNoNoNo
Administration > Infrastructure accounts > VCF instancesManage VCF collectors (add/edit/delete)NoNoNo
Administration > Identity and access > ProjectsView the list and details of configured ProjectsNoNoNo
Administration > Identity and access > ProjectsManage Projects (create/delete)NoNoNo
Administration > Identity and access > ProjectsEdit ProjectsNoNoNo
Administration > Identity and access > ProjectsManage users and their roles for a Project (add/edit/delete)NoNoNo
Administration > Identity and access > ProjectsManage resources, such as public cloud accounts or Kubernetes clusters, for a Project (add/edit/delete)NoNoNo
Developer resourcesView developer resourcesYesYesYes

Tanzu Salt

Tanzu Platform pageFeatureAdminOperatorViewer
Administration > Infrastructure configuration > Operating Systems (Salt)Configure Salt MasterNoNoNo