Skip Navigation
Show nav
Heroku Dev Center
  • Get Started
  • Documentation
  • Changelog
  • Search
  • Get Started
    • Node.js
    • Ruby on Rails
    • Ruby
    • Python
    • Java
    • PHP
    • Go
    • Scala
    • Clojure
  • Documentation
  • Changelog
  • More
    Additional Resources
    • Home
    • Elements
    • Products
    • Pricing
    • Careers
    • Help
    • Status
    • Events
    • Podcasts
    • Compliance Center
    Heroku Blog

    Heroku Blog

    Find out what's new with Heroku on our blog.

    Visit Blog
  • Log inorSign up
View categories

Categories

  • Heroku Architecture
    • Dynos (app containers)
    • Stacks (operating system images)
    • Networking & DNS
    • Platform Policies
    • Platform Principles
  • Command Line
  • Deployment
    • Deploying with Git
    • Deploying with Docker
    • Deployment Integrations
  • Continuous Delivery
    • Continuous Integration
  • Language Support
    • Node.js
    • Ruby
      • Working with Bundler
      • Rails Support
    • Python
      • Background Jobs in Python
      • Working with Django
    • Java
      • Working with Maven
      • Java Database Operations
      • Working with Spring Boot
      • Java Advanced Topics
    • PHP
    • Go
      • Go Dependency Management
    • Scala
    • Clojure
  • Databases & Data Management
    • Heroku Postgres
      • Postgres Basics
      • Postgres Getting Started
      • Postgres Performance
      • Postgres Data Transfer & Preservation
      • Postgres Availability
      • Postgres Special Topics
    • Heroku Data For Redis
    • Apache Kafka on Heroku
    • Other Data Stores
  • Monitoring & Metrics
    • Logging
  • App Performance
  • Add-ons
    • All Add-ons
  • Collaboration
  • Security
    • App Security
    • Identities & Authentication
    • Compliance
  • Heroku Enterprise
    • Private Spaces
      • Infrastructure Networking
    • Enterprise Accounts
    • Enterprise Teams
    • Heroku Connect (Salesforce sync)
      • Heroku Connect Administration
      • Heroku Connect Reference
      • Heroku Connect Troubleshooting
    • Single Sign-on (SSO)
  • Patterns & Best Practices
  • Extending Heroku
    • Platform API
    • App Webhooks
    • Heroku Labs
    • Building Add-ons
      • Add-on Development Tasks
      • Add-on APIs
      • Add-on Guidelines & Requirements
    • Building CLI Plugins
    • Developing Buildpacks
    • Dev Center
  • Accounts & Billing
  • Troubleshooting & Support
  • Integrating with Salesforce
  • Heroku Enterprise
  • Enterprise Teams
  • App Permissions and Allowed Actions

App Permissions and Allowed Actions

English — 日本語に切り替える

Last updated March 07, 2023

This feature is currently available in Heroku Enterprise.

App permissions enable fine grained access controls for Heroku Enterprise Accounts. This article lists the different actions users can take when granted different permissions on apps. Permissions are independently assigned and any combination of permissions can be assigned to a user on an app. For more information on app permissions see Using App Permissions in Heroku Enterprise Teams.

Action  View  DeployOperateManage
General app and access info
View basic app infoX   
Rename app   X
Delete app   X
Add/remove non-org user to app   X
Manage permissions for other users on app   X
Lock/unlock   X
Transfer the app   X
Code and config
View code (git pull) X  
Push code (new release) X  
View config variables XX 
Edit config variables XX 
Add-ons
View list of add-ons on an app XX 
View app specific add-on resource configuration XX 
SSO access to add-on admin pages XX 
Add new free add-on resources to app XX 
Add new paid add-on resources to app  X 
Remove free add-on resources from app XX 
Remove paid add-on resources from app  X 
Change free add-on tier XX 
Change paid add-on tier  X 
App execution
View app dyno usageX   
View logging drain config   X
Add/remove logging drains  X 
View logs  X 
View process statusX   
See current dynos, workersX   
View metricsX   
Set up threshold alerts  X
View releasesX   
Restart app  X 
Rollback releases XX 
Migrate stack  X 
See current stackX   
View maintenance modeX   
Turn on and off maintenance mode XX 
Run one-off commands (including rake and console) XX 
Scale processes XX 
Resize processes XX 
Configuration
View custom domainsX   
View SSL endpoint   X
Set custom domains   X
Add SSL certificate   X
Remove SSL certificate   X
  1. Permissions are independently assigned for a user on an app. For example, manage permission does not automatically include operate or deploy permission.
  2. Permissions can be granted in any combination. For example, a user can be granted operate and manage permission.
  3. If a user is granted the manage permissions, they can grant themselves additional permissions on the app.
  4. The view permission is assigned by default for all org members on unlocked apps in the organization. It is also assigned when a user is explicitly added to a locked app.

Related Articles:

  • Team permissions and allowed actions

  • Private space management

Keep reading

  • Enterprise Teams

Feedback

Log in to submit feedback.

Using App Permissions in Enterprise Teams Developing Apps Within Enterprise Teams

Information & Support

  • Getting Started
  • Documentation
  • Changelog
  • Compliance Center
  • Training & Education
  • Blog
  • Podcasts
  • Support Channels
  • Status

Language Reference

  • Node.js
  • Ruby
  • Java
  • PHP
  • Python
  • Go
  • Scala
  • Clojure

Other Resources

  • Careers
  • Elements
  • Products
  • Pricing

Subscribe to our monthly newsletter

Your email address:

  • RSS
    • Dev Center Articles
    • Dev Center Changelog
    • Heroku Blog
    • Heroku News Blog
    • Heroku Engineering Blog
  • Heroku Podcasts
  • Twitter
    • Dev Center Articles
    • Dev Center Changelog
    • Heroku
    • Heroku Status
  • Facebook
  • Instagram
  • Github
  • LinkedIn
  • YouTube
Heroku is acompany

 © Salesforce.com

  • heroku.com
  • Terms of Service
  • Privacy
  • Cookies
  • Cookie Preferences