New Planner role rollout plan (#15645) · Epics · GitLab.org

New Planner role rollout plan

## Summary We are rolling out the new `Planner` role as part of the **Enterprise Agile Planning** add-on for GitLab Ultimate. This role is designed to provide tailored access for product managers and planning-focused users, addressing the need for more specific permissions in planning workflows. This issue will track activities related to the Planner role rollout, including internal and external communications, enablement for key teams, and share-out of the change once the role is live. ## Billable user This role is considered a [billable user](https://docs.gitlab.com/ee/subscriptions/self_managed/#billable-users) for Premium and Ultimate subscriptions. For Ultimate subscriptions, customers can purchase the [Enterprise Agile Planning (EAP) add-on](https://about.gitlab.com/pricing/) for users scoped to this role ## Permissions scope The `Plan User` will have at minimum, the same permissions as a `Guest` user across the platform but will have full access to Plan Stage features as described below. Noting that we will validate these permissions to ensure we have the right scoped permissions for the Product and Project Management roles. <details> <summary>Project Permissions</summary> #### Project Permissions <table> <tr> <th>Action</th> <th>Guest</th> <th> **Plan User** </th> <th>Reporter</th> <th>Developer</th> <th>Maintainer</th> <th>Owner</th> </tr> <tr> <td> Analytics: View issue analytics </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Analytics: View merge request analytics </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Analytics: View value stream analytics </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Analytics: View DORA metrics </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Analytics: View CI/CD analytics </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Analytics: View code review analytics </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Analytics: View repository analytics </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Application security](application_security/index.md): View licenses in [dependency list](application_security/dependency_list/index.md) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Application security](application_security/index.md): Create and run [on-demand DAST scans](application_security/dast/proxy-based.md#on-demand-scans) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Application security](application_security/index.md): Manage [security policy](application_security/policies/index.md) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Application security](application_security/index.md): View [dependency list](application_security/dependency_list/index.md) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Application security](application_security/index.md): Create a [CVE ID Request](application_security/cve_id_request.md) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Application security](application_security/index.md): Create or assign [security policy project](application_security/policies/index.md) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> GitLab Agent for Kubernetes: View agents </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> GitLab Agent for Kubernetes: Manage agents </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Container Registry: Create, edit, delete cleanup policies </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Container Registry: Push an image to the Container Registry </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Container Registry: Pull an image from the Container Registry </td> <td>✓ (19)</td> <td>✓ (19)</td> <td>✓ (19)</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Container Registry: Remove a Container Registry image </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> GitLab Pages: View Pages protected by access control </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> GitLab Pages: Manage </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> GitLab Pages: Manage GitLab Pages domains and certificates </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> GitLab Pages: Remove GitLab Pages </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Assign an alert </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Participate in on-call rotation </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): View [incident](../operations/incident_management/incidents.md) </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Change [alert status](../operations/incident_management/alerts.md#change-an-alerts-status) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Change [incident severity](../operations/incident_management/manage_incidents.md#change-severity) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Create [incident](../operations/incident_management/incidents.md) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): View [alerts](../operations/incident_management/alerts.md) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): View [escalation policies](../operations/incident_management/escalation_policies.md) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td> </td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): View [on-call schedules](../operations/incident_management/oncall_schedules.md) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Change [incident escalation status](../operations/incident_management/manage_incidents.md#change-status) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Change [incident escalation policy](../operations/incident_management/manage_incidents.md#change-escalation-policy) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Manage [on-call schedules](../operations/incident_management/oncall_schedules.md) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Incident Management](../operations/incident_management/index.md): Manage [escalation policies](../operations/incident_management/escalation_policies.md) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issue boards: Create or delete lists </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issue boards: Move issues between lists </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Add Labels </td> <td>✓ (15)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Add to epic </td> <td> </td> <td>✓</td> <td>✓ (22)</td> <td>✓ (22)</td> <td>✓ (22)</td> <td>✓ (22)</td> </tr> <tr> <td> Issues: Assign </td> <td>✓ (15)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Create (17) </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Create confidential issues </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: View Design Management pages </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: View related issues </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Set weight </td> <td>✓ (15)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Set metadata such as labels, milestones, or assignees when creating an issue </td> <td>✓ (15)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Edit metadata such labels, milestones, or assignees for an existing issue </td> <td>(15)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Set parent epic </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: View confidential issues </td> <td>(2)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td>Read internal notes on issues and merge requests</td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Close / reopen (18) </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Lock threads </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Manage related issues </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Manage tracker </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Move issues (14) </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Set issue time tracking estimate and time spent </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Archive Design Management files </td> <td> </td> <td>✓</td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Upload Design Management files </td> <td> </td> <td>✓</td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Issues: Delete </td> <td> </td> <td>✓</td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td>Import/export issues and work items</td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> License Compliance: View allowed and denied licenses </td> <td>✓ (1)</td> <td>✓ (1)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> License Compliance: View License Compliance reports </td> <td>✓ (1)</td> <td>✓ (1)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> License Compliance: View License list </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> License Compliance: Manage license policy </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: View </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Comment </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Assign reviewer </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: See list </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Apply code change suggestions </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Approve (8) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Assign </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Create (16) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Add labels </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Lock threads </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Manage or accept </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Resolve a thread </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Manage merge approval rules (project settings) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Merge requests: Delete </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> [Metrics dashboards](../operations/metrics/dashboards/index.md): Manage user-starred metrics dashboards (6) </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Metrics dashboards](../operations/metrics/dashboards/index.md): View metrics dashboard annotations </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Metrics dashboards](../operations/metrics/dashboards/index.md): Create/edit/delete metrics dashboard annotations </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Package registry: Pull a package </td> <td>✓ (1)</td> <td>✓ (1)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Package registry: Publish a package </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Package registry: Delete a package </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Package registry: Delete a file associated with a package </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Project operations](../operations/index.md): View [Error Tracking](../operations/error_tracking.md) list </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Project operations](../operations/index.md): Manage [Feature flags](../operations/feature_flags.md) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Project operations](../operations/index.md): Manage [Error Tracking](../operations/error_tracking.md) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Download project </td> <td>✓ (1)</td> <td>✓ (1)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Leave comments </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Reposition comments on images (posted by any user) </td> <td>✓ (9)</td> <td>✓ (9)</td> <td>✓ (9)</td> <td>✓ (9)</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View Insights </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View releases </td> <td>✓ (5)</td> <td>✓ (5)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View Requirements </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View time tracking reports </td> <td>✓ (1)</td> <td>✓ (1)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View wiki pages </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Create [snippets](snippets.md) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Manage labels </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View [project traffic statistics](../api/project_statistics.md) </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Create, edit, delete milestones. </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Create/edit/delete iterations </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Create, edit, delete releases </td> <td> </td> <td> </td> <td> </td> <td>✓ (12)</td> <td>✓ (12)</td> <td>✓ (12)</td> </tr> <tr> <td> Projects: Create, edit wiki pages </td> <td> </td> <td>✓</td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Enable [Review Apps](../ci/review_apps/index.md) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: View project [Audit Events](../administration/audit_events.md) </td> <td> </td> <td> </td> <td> </td> <td>✓ (10)</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Add deploy keys </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Add new team members </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Manage team members </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓ (20)</td> <td>✓</td> </tr> <tr> <td> Projects: Change [project features visibility](public_access.md) level </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓ (13)</td> <td>✓</td> </tr> <tr> <td> Projects: Configure webhooks </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Delete wiki pages </td> <td> </td> <td>✓</td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Edit comments (posted by any user) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Edit project badges </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Edit project settings </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Export project </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Manage project access tokens (11) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓ (20)</td> <td>✓</td> </tr> <tr> <td> Projects: Manage [Project Operations](../operations/index.md) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Rename project </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Share (invite) projects with groups </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓ (7)</td> <td>✓ (7)</td> </tr> <tr> <td> Projects: View 2FA status of members </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Projects: Assign project to a compliance framework </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Projects: Archive project </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Projects: Change project visibility level </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Projects: Delete project </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Projects: Disable notification emails </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Projects: Transfer project to another namespace </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Projects: View [Usage Quotas](usage_quotas.md) page </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Pull project code </td> <td>✓ (1)</td> <td>✓ (1)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: View project code </td> <td>✓ (1) (23)</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: View a commit status </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Add tags </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Create new branches </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Create or update commit status </td> <td> </td> <td> </td> <td> </td> <td>✓ (4)</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Force push to non-protected branches </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Push to non-protected branches </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Remove non-protected branches </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Rewrite or remove Git tags </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Enable or disable branch protection </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Enable or disable tag protection </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Manage push rules </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Push to protected branches (4) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Turn on or off protected branch push for developers </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Repository: Remove fork relationship </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Repository: Force push to protected branches (3) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> </tr> <tr> <td> Repository: Remove protected branches (3) </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> <td> </td> </tr> <tr> <td> Requirements Management: Archive / reopen </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Requirements Management: Create / edit </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Requirements Management: Import / export </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Create issue from vulnerability finding </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Create vulnerability from vulnerability finding </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Dismiss vulnerability </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Dismiss vulnerability finding </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Resolve vulnerability </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Revert vulnerability to detected state </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): Use security dashboard </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): View vulnerability </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Security dashboard](application_security/security_dashboard/index.md): View vulnerability findings in [dependency list](application_security/dependency_list/index.md) </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Tasks](tasks.md): Create (17) </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Tasks](tasks.md): Edit </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Tasks](tasks.md): Remove from issue </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Tasks](tasks.md): Delete (21) </td> <td> </td> <td>✓</td> <td> </td> <td> </td> <td> </td> <td>✓</td> </tr> <tr> <td> Terraform: Read Terraform state </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> Terraform: Manage Terraform state </td> <td> </td> <td> </td> <td> </td> <td> </td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Test cases](../ci/test_cases/index.md): Archive </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Test cases](../ci/test_cases/index.md): Create </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Test cases](../ci/test_cases/index.md): Move </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> <tr> <td> [Test cases](../ci/test_cases/index.md): Reopen </td> <td> </td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> <td>✓</td> </tr> </table> 1. On self-managed GitLab instances, users with the Guest role are able to perform this action only on public and internal projects (not on private projects). [External users](admin_area/external_users.md) must be given explicit access even if the project is internal. Users with the Guest role on GitLab.com are only able to perform this action on public projects because internal visibility is not available. 2. Guest users can only view the confidential issues they created themselves or are assigned to. 3. Not allowed for Guest, Reporter, Developer, Maintainer, or Owner. See protected branches. 4. If the branch is protected, this depends on the access given to Developers and Maintainers. 5. Guest users can access GitLab **Releases** for downloading assets but are not allowed to download the source code nor see repository information like commits and release evidence. 6. Actions are limited only to records owned (referenced) by user. 7. When Share Group Lock is enabled the project can't be shared with other groups. It does not affect group with group sharing. 8. For information on eligible approvers for merge requests, see Eligible approvers. 9. Applies only to comments on Design Management designs. 10. Users can only view events based on their individual actions. 11. Project access tokens are supported for self-managed instances on Free and above. They are also supported on GitLab SaaS Premium and above (excluding [trial licenses](https://about.gitlab.com/free-trial/)). 12. If the tag is protected, this depends on the access given to Developers and Maintainers. 13. A Maintainer or Owner can't change project features visibility level if [project visibility](public_access.md) is set to private. 14. Attached design files are moved together with the issue even if the user doesn't have the Developer role. 15. Guest users can only set metadata (for example, labels, assignees, or milestones) when creating an issue. They cannot change the metadata on existing issues. 16. In projects that accept contributions from external members, users can create, edit, and close their own merge requests. 17. Authors and assignees can modify the title and description even if they don't have the Reporter role. 18. Authors and assignees can close and reopen issues even if they don't have the Reporter role. 19. The ability to view the Container Registry and pull images is controlled by the Container Registry's visibility permissions. 20. Maintainers cannot create, demote, or remove Owners, and they cannot promote users to the Owner role. They also cannot approve Owner role access requests. 21. Authors of tasks can delete them even if they don't have the Owner role, but they have to have at least the Guest role for the project. 22. You must have permission to view the epic. 23. In GitLab 15.9 and later, users with the Guest role and an Ultimate license can view private repository content if an administrator gives those users permission. The administrator can create a [custom role](#custom-roles) through the API and assign that role to the users. </details> <details> <summary>Group Permissions</summary> #### Group Permissions | Action | Guest | Plan User | Reporter | Developer | Maintainer | Owner | |--------|-------|-----------|----------|-----------|------------|-------| | Add/remove child epics | ✓ (8) | ✓ | ✓ | ✓ | ✓ | ✓ | | Add an issue to an epic | ✓ (7) | ✓ (7) | ✓ (7) | ✓ (7) | ✓ (7) | ✓ (7) | | Browse group | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | Pull a container image using the dependency proxy | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | View Contribution analytics | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | View contacts/organizations | | ✓ | ✓ | ✓ | ✓ | ✓ | | View issue contacts | | ✓ | ✓ | ✓ | ✓ | ✓ | | Add/remove issue contacts | | ✓ | ✓ | ✓ | ✓ | ✓ | | Create/edit contacts/organizations | | | | ✓ | ✓ | ✓ | | View group epic | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | View group wiki pages | ✓ (5) | ✓ (5) | ✓ | ✓ | ✓ | ✓ | | View Insights | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | View Insights charts | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | View Issue analytics | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | View value stream analytics | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | Create/edit group epic | | ✓ | ✓ | ✓ | ✓ | ✓ | | Read confidential epics | | ✓ | ✓ | ✓ | ✓ | ✓ | | Read internal notes on epics | | ✓ | ✓ | ✓ | ✓ | ✓ | | Create/edit/delete epic boards | | ✓ | ✓ | ✓ | ✓ | ✓ | | Create/edit/delete issue boards | | ✓ | ✓ | ✓ | ✓ | ✓ | | Manage group labels | | ✓ | ✓ | ✓ | ✓ | ✓ | | Publish packages | | | | ✓ | ✓ | ✓ | | Pull packages | | | ✓ | ✓ | ✓ | ✓ | | Delete packages | | | | | ✓ | ✓ | | Create/edit/delete Maven and generic package duplicate settings | | | | | ✓ | ✓ | | Enable/disable package request forwarding | | | | | ✓ | ✓ | | Pull a Container Registry image | ✓ (6) | ✓ (6) | ✓ | ✓ | ✓ | ✓ | | Remove a Container Registry image | | | | ✓ | ✓ | ✓ | | Run deployment job for a protected environment | | | ✓ | ✓ | ✓ | ✓ | | View Group DevOps Adoption | | | ✓ | ✓ | ✓ | ✓ | | View metrics dashboard annotations | | | ✓ | ✓ | ✓ | ✓ | | View Productivity analytics | | | ✓ | ✓ | ✓ | ✓ | | Create and edit group wiki pages | | ✓ | | ✓ | ✓ | ✓ | | Create project in group | | | | ✓ (2)(4) | ✓ (2) | ✓ (2) | | Create/edit/delete group milestones | | ✓ | ✓ | ✓ | ✓ | ✓ | | Create/edit/delete iterations | | | ✓ | ✓ | ✓ | ✓ | | Create/edit/delete metrics dashboard annotations | | | | ✓ | ✓ | ✓ | | Enable/disable a dependency proxy | | | | | ✓ | ✓ | | Purge the dependency proxy for a group | | | | | | ✓ | | Create/edit/delete dependency proxy cleanup policies | | | | | ✓ | ✓ | | Use [security dashboard](application_security/security_dashboard/index.md) | | | | ✓ | ✓ | ✓ | | View group Audit Events | | | | ✓ (6) | ✓ (6) | ✓ | | Create subgroup | | | | | ✓ (1) | ✓ | | Delete group wiki pages | | ✓ | | ✓ | ✓ | ✓ | | Edit epic comments (posted by any user) | | | | | ✓ | ✓ | | List group deploy tokens | | | | | ✓ | ✓ | | Manage group push rules | | | | | ✓ | ✓ | | View/manage group-level Kubernetes cluster | | | | | ✓ | ✓ | | Create and manage compliance frameworks | | | | | | ✓ | | Create/Delete group deploy tokens | | | | | | ✓ | | Change group visibility level | | | | | | ✓ | | Delete group | | | | | | ✓ | | Delete group epic | | ✓ | | | | ✓ | | Disable notification emails | | | | | | ✓ | | Edit group settings | | | | | | ✓ | | Edit SAML SSO | | | | | | ✓ (3) | | Filter members by 2FA status | | | | | | ✓ | | Manage group level CI/CD variables | | | | | | ✓ | | Manage group members | | | | | | ✓ | | Share (invite) groups with groups | | | | | | ✓ | | View 2FA status of members | | | | | | ✓ | | View [Billing](../subscriptions/gitlab_com/index.md#view-your-gitlab-saas-subscription) | | | | | | ✓ (3) | | View group [Usage Quotas](usage_quotas.md) page | | | | | | ✓ (3) | | Manage group runners | | | | | | ✓ | | Migrate groups | | | | | | ✓ | | Manage [subscriptions, and purchase CI/CD minutes and storage](../subscriptions/gitlab_com/index.md) | | | | | | ✓ | 1. Groups can be set to allow either Owners, or Owners and users with the Maintainer role, to create subgroups. 2. Default project creation role can be changed at: - The [instance level](admin_area/settings/visibility_and_access_controls.md#define-which-roles-can-create-projects). - The group level. 3. Does not apply to subgroups. 4. Developers can push commits to the default branch of a new project only if the default branch protection is set to "Partially protected" or "Not protected". 5. In addition, if your group is public or internal, all users who can see the group can also see group wiki pages. 6. Users can only view events based on their individual actions. 7. You must have permission to view the epic and edit the issue. 8. You must have permission to view the parent and child epics. </details> ### Rollout task status ```glql --- display: table fields: state, title, due, healthStatus, updated --- project = "gitlab-com/Product" and label = "EAP Planning Role" and opened = true ```

epic