The permissions
Six catalog permissions can be granted on a team role, so they only apply to the types that team owns:- Create catalog types, Edit catalog types, and Delete catalog types cover the types themselves
- Create catalog entries, Edit catalog entries, and Delete catalog entries cover the entries of any type the team owns
Setting an owning team
Set a catalog type’s owner in the Catalog type owner field when you create or edit a type in Catalog. You can assign more than one owning team.
Choosing which team owns a catalog type
System-managed catalog types can’t be owned by a team. Their structure is fixed by incident.io, so changes to them
always need the account-wide permission.
Example: letting a team manage its own services
Say you want the platform team to own the Services type: they should be able to create, edit, and delete service entries, but no one outside the team should be able to change them.- In Catalog, open the Services type and set the Catalog type owner to the platform team.
- At Settings → Permissions → Team-level, create (or edit) a team role that includes the Edit catalog entries permission (add the Create catalog entries and Delete catalog entries permissions if they should manage the full set).
- On the platform team’s Members tab, assign that role to the people who should manage services.
FAQs
Who can change which teams own a catalog type?
Who can change which teams own a catalog type?
Reassigning ownership always requires the Edit catalog types permission granted account-wide. A team can manage
a type they own and its entries, but they can’t hand the type to another team or remove their own team from it.
What happens to catalog types with no owning team?
What happens to catalog types with no owning team?
Nothing changes for them. They can only be managed by people who hold the relevant catalog permission account-wide,
the same as how every catalog type behaves today.
Can a type be owned by more than one team?
Can a type be owned by more than one team?
Yes. You can assign multiple owning teams, and a member of any one of them (with the permission granted to that
team) can manage the type and its entries.
What about types managed by GitHub or Terraform?
What about types managed by GitHub or Terraform?
Both GitHub and Terraform can define the owning teams for a catalog type as part of their config, so
externally-managed types can be team-owned just like ones you create in the dashboard, and their entries are gated by
that ownership.You can also restrict which types a given integration can modify by giving its API key only team-scoped catalog
permissions. A key with team-scoped permissions can create, edit, and delete types (and their entries) for the teams
it’s scoped to, but nothing else. See API keys for how team-scoped permissions work.
Can admins still manage every catalog type and entry?
Can admins still manage every catalog type and entry?
Yes. Anyone who holds the permission account-wide can manage any catalog type or entry, regardless of which team
owns it.