Skip to main content

User roles and permissions

Roles are comprised of different permissions that allow users to perform specific tasks with Veracode products. The Veracode Platform provides predefined user roles that Administrators assign to a user's account.

There are separate roles for UI users and API users, but some roles apply to both user types.

To see the roles assigned to your user account, sign in to the Veracode Platform and select Your Account from the top navigation menu.

UI user roles​

Assign predefined UI user roles to human users, such as developers, who interact with user interfaces or the Veracode APIs. To see the required roles for performing specific Veracode tasks, see UI user roles by task. To see which roles customers typically use based on their job function, see UI user roles by jobs.

API user roles​

Assign predefined API user roles to non-human API users, such as systems or services, that use the Veracode APIs or integrations.

Custom user roles​

Optionally, use the Identity API to create custom UI or API roles that meet the needs of your organization. Custom roles define specific permissions assigned to users. For example, you can assign a custom role with permissions to manage application profiles, submit scans, and manage teams, and apply it to specific user accounts.

After creating a custom role, assign it to users in the same way you assign standard user roles.

Quick lookup by task​

Need to scan code? → Creator, Submitter, Security Lead, or Upload and Scan API

Need to review and fix findings? → Reviewer, Mitigation Approver, Security Lead, Results API or Mitigation API

Need to view reports? → Analytics Creator, Security Insights, Executive, or Reporting API

Need to manage users? → Administrator, Team Admin, or Admin API

Need to manage policies? → Policy Administrator, Security Lead, or Admin API

Need sandbox access? → Sandbox User, Sandbox Administrator, Creator, Submitter, or Security Lead

Need SCA access? → Workspace Administrator, Workspace Editor, Creator, Submitter, or Security Lead

See more tasks for UI users and typical UI roles based on a user's job.