Skip to main content
Solved

Can you set Diagram read/write permissions by role?

  • July 30, 2025
  • 7 replies
  • 131 views

We have a couple of custom LeanIX roles set up in our organization, facilitated via SSO.  One of these roles is associated with the majority of employees in our company, we’ll call it “RO” for short, and another is associated with the team of individuals responsible for updating these diagrams (we’ll call it "RW”).  

If I set the baseline permissions of a diagram to read-only, I haven’t been able to find a way to assign Read/Write permissions to members of the RW role.  It looks like the only way to assign these is at the user level for every diagram we have published.  

The end goal is to have a sort of “diagram reference library” which, when published to, is read-only visible to the larger role group without having to manually grant write permissions to the smaller individually, per user, per diagram.

Is anyone doing this today? 

Best answer by justinharclerode

Yes please submit a support ticket or talk with your CSM.

7 replies

justinharclerode
Community Manager
Forum|alt.badge.img+1
  • Community Manager
  • 36 replies
  • July 30, 2025

Hi yes this is possible today. You will need to contact support and or your customer success manager to go into advance configuration, under bookmarks and allow RO read only access to diagrams. There is currently no way to create a new diagram, and say for RO users they can read but R-test can read and update. If your use case is simply RO can only read all diagrams, this is possible. If it’s specific diagrams this is not possible today. 


  • Author
  • Rookie
  • 1 reply
  • August 1, 2025

My apologies, but I’m not 100% sure I follow.  Are you saying this isn’t something an ADMIN cannot setup, but will need to configure via the LeanIX team?

I appreciate your clarity.

 


justinharclerode
Community Manager
Forum|alt.badge.img+1
  • Community Manager
  • 36 replies
  • Answer
  • August 1, 2025

Yes please submit a support ticket or talk with your CSM.


Fab
Forum|alt.badge.img
  • Royalty For Loyalty
  • 40 replies
  • September 11, 2025

Yes please submit a support ticket or talk with your CSM.

Hi ​@justinharclerode

Why isn’t this a standard permission an Admin could grant to Roles? Isn’t it just possible to have it added to the standard permissions? It is more likely to be in your roadmap, I’d presume? 🤔
 

 


Forum|alt.badge.img
  • Royalty For Loyalty
  • 30 replies
  • October 20, 2025

@justinharclerode 
Maybe related:
Can i grant or remove permissions to diagrams as part of an automation?  (Script)?
Are there such documented?

I cannot find it in the help documentation.

Thanks in advance.


Fab
Forum|alt.badge.img
  • Royalty For Loyalty
  • 40 replies
  • November 6, 2025

@justinharclerode 
Maybe related:
Can i grant or remove permissions to diagrams as part of an automation?  (Script)?
Are there such documented?

I cannot find it in the help documentation.

Thanks in advance.

You won’t find this in the documentation (or if it is, please send it over!!)

Each diagram has the permissions node attached to it. Check the Bookmarks in Pathfinder, under the permitted users

the PATCH option available only allows to update the owner of the diagram. I believe to change the viewers you may need to use a PUT and swap the permittedUserIds collection.

I have tried but got a 403 permission error then. Perhaps there is some authorization grant required (e.g. account admin). ​Perhaps 🤔@Thomas Schreiner could chime in  

 


Forum|alt.badge.img
  • Royalty For Loyalty
  • 30 replies
  • November 6, 2025

Thank you ​@Fab - Yes found the same.

It took some work to realize that diagrams are “bookmarks :
Bookmarks | SAP Help Portal

This opens the door to grant/monitor group-based permissions for a subset of diagrams/reports/dashboards (today LeanIX only allows controlling access to either ALL or NONE of them).  Maybe one day it will become a roadmap item….