Concourse Permission Matrix

	A	B	C	D	E	F	G
1	Fly
2		Anon	Admin	Owner	Member	Viewer
3	Command	Anon	Admin	Owner	Member	Viewer

4	abort-build	✘		✓	✓	✘
5	builds	✓		✓	✓	✓
6	check-resource	✘		✓	✓	✘
7	checklist	✘		✓	✓	✘
8	containers	✘		✓	✓	✘
9	destroy-pipeline	✘		✓	✓	✘
10	destroy-team	✘	✓	✘	✘	✘
11	execute	✘		✓	✓	✘
12	expose-pipeline	✘		✓	✓	✘
13	format-pipeline	✘		✓	✓	✘
14	get-pipeline	✘		✓	✓	✘
15	help	✓		✓	✓	✓
16	hide-pipeline	✘		✓	✓	✘
17	hijack	✘		✓	✓	✘
18	jobs	✓		✓	✓	✓
19	login	✓
20	logout	✘		✓	✓	✓
21	order-pipelines	✘		✓	✓	✘
22	pause-job	✘		✓	✓	✘
23	pause-pipeline	✘		✓	✓	✘
24	pause-resource	✘		✓	✓	✘
25	pipelines	✓		✓	✓	✓
26	prune-worker	✘		✓*	✓*	✘	(member can only prune own team's workers)
27	rename-pipeline	✘		✓	✓	✘
28	rename-team	✘	✓	✘	✘	✘
29	set-pipeline	✘		✓	✓	✘
30	set-team	✘	✓	✓*	✘	✘	(admin can create/update other/new teams, member can only update their own)
31	status	✓		✓	✓	✓
32	sync	✓		✓	✓	✓
33	targets	✓		✓	✓	✓
34	teams	✘	✓	✓	✓	✓
35	trigger-job	✘		✓	✓	✘
36	unpause-job	✘		✓	✓	✘
37	unpause-pipeline	✘		✓	✓	✘
38	unpause-resource	✘		✓	✓	✘
39	validate-pipeline	✓		✓	✓	✓
40	volumes	✘		✓	✓	✘
41	watch	✓*		✓	✓	✓*	(subject to job being public/exposed somehow)
42	workers	✘		✓*	✓*	✘	(can only see global workers and workers owned by their teams)
43
44	new roles
45	set-role
46	remove-role
47	view users on a team?
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100