Network map permissions

This page lists what each permission allows on network maps, and which built-in roles hold it. Use it to decide who on your team may edit diagrams or change your map style. For roles in general, see Roles and permissions. On Home Lab, the one console user is the owner and holds every permission.

Permissions

Permission	Allows	Held by default
discovery:read	View the network map, its snapshots and changes, trace paths, compare with a diagram file, export, and view documented diagrams, racks, link details, map styles, and icons.	Owner, Support Manager, Field Technician, Support Rep
endpoint:read	See endpoints on the map. Without it, an endpoint shows as the discovered device it matched, or is left out.	Owner, Support Manager, Field Technician, Support Rep
docs:read	Compare the map with a .drawio or .vsdx file in the client’s documentation. Without it, upload the file instead.	Owner, Support Manager, Field Technician, Support Rep, Sales, Project manager
network_map:edit	Create, edit, restore, share, and delete documented diagrams, accept and reject proposals, set drift alert thresholds, edit link details, and create, change, and delete racks.	Owner, and every built-in role that holds docs:write: Support Manager and Field Technician
network_map:manage	Change the practice map style, a client’s style override, and the icon library.	Owner, and every built-in role that holds discovery:manage: Support Manager

The two network_map permissions were added with network maps. A built-in role you had already narrowed so it lacks docs:write or discovery:manage does not get them. Custom roles get neither until you add them.

Saving a Pioneer AI drawing needs docs:write for Save to documentation, and network_map:edit for Save as network diagram.

What a client’s own users see

On the MSP plan, people who sign in to a client’s own console see only the documented diagrams marked Visible to client, and only their current revision. They cannot see earlier revisions or proposals, and cannot change anything, whatever their role.

Related

• Permissions
• Network maps