Skip to main content
Docs
Feature Requests Onboarding Trust Center Status Page

Community

Destination Improvement: RBAC roles for "Destination User"

Answered
Shath Tharmaratnam User

We have setup "Teams" as group of users from the our Product side. We want to give these teams access to "sync" and "test" all connectors for a few Destination but not edit any of the connectors within those Destinations. It seems that "View Destination" role does not allow the users to sync or test the connectors and "Manage/Edit Destination" is too permissive as it allows the users to edit the connections. We would like a role that can do the above without giving the team edit access to the connectors?

Please sign in to leave a comment.

Comments

2 comments

Date Votes
  • Official comment
    Amy Peterson Fivetranner

    Hi Shath,

    Thanks for the feedback! The concept of more granular roles—specifically, enabling users to sync and test connectors at the destination level without edit permissions—is clear. Could you share more about your underlying use case? For example, are there specific workflows or security requirements driving this need, and how often would teams need to perform sync or test operations without editing connector configurations?

    Updates and progress will be posted here on this thread for the community.

    Thanks,
    Amy

  • Shath Tharmaratnam User

    Hi Amy,

    To add, we built connectors using automation via IAC (terraform). So all configurations must be done via script and changes need to be logged and version controlled. For this reason, we don't want users to edit/modify the configs. But we have seen that we need users to manually "Sync" and "Test" connectors due to issues outside of Fivetran (ie connectivity)