Profiles define sets of permissions that can be assigned to Principals. Use profiles to implement Role-Based Access Control (RBAC) in Plinqx.Documentation Index
Fetch the complete documentation index at: https://hypha-docs.plinqx.app/llms.txt
Use this file to discover all available pages before exploring further.
What are Profiles?
Profiles are collections of permissions that define what actions a Principal can perform. Instead of assigning permissions directly to each Principal, you:- Create profiles with specific permission sets
- Assign profiles to Principals
- Principals inherit all permissions from their profile
Default Profiles
Plinqx includes system profiles:Administrator
- Description: Full system access with all permissions
- Permissions: All available permissions
- Use Case: System administrators, tenant owners
Developer
- Description: Access to tools, collections, and testing
- Permissions: Tool management, collection management, playground access
- Use Case: Developers building integrations
Viewer
- Description: Read-only access
- Permissions: View tools, collections, audit logs
- Use Case: Stakeholders who need visibility
System profiles cannot be deleted or modified. You can create custom profiles for your specific needs.
Creating Custom Profiles
Configure Profile
Provide:
- Name: Profile name (e.g., “Salesforce Admin”)
- Description: What this profile is for
Permission Categories
Permissions are organized by category:- Collections: View and manage collections
- Tools: Manage custom tools, imported tools
- Connections: Manage provider and MCP server connections
- API Keys: Create and manage API keys
- Vault: Manage credentials
- Policies: Configure governance policies
- Approvals: Manage approval requests
- Audit: View audit logs
- Team: Manage team members
- Administration: System administration
Assigning Profiles to Principals
A Principal can have one profile at a time. Changing a profile immediately updates the Principal’s permissions.
Editing Profiles
Permission Details
Each permission has:- Key: Internal identifier (e.g.,
collections:view) - Name: Human-readable name
- Category: Permission category
- Requires Admin: Whether only admins can have this permission
Best Practices
Principle of Least Privilege
Grant only the minimum permissions needed
Use Descriptive Names
Name profiles clearly (e.g., “Salesforce Admin”, “API Developer”)
Document Profiles
Use descriptions to explain profile purpose
Regular Reviews
Periodically review profile assignments and permissions
Next Steps
Manage Principals
Assign profiles to Principals
View Audit Logs
Monitor permission usage