> For the complete documentation index, see [llms.txt](https://docs.extrahorizon.com/cli/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.extrahorizon.com/cli/other/permissions-required-by-the-cli.md).

# Permissions required by the CLI

The Extra Horizon CLI requires certain permissions to function correctly. If you, for example, want to create a dedicated user for running commands in a CI/CD pipeline, you need to ensure that this user has the following global permissions:

For the schema commands

* `CREATE_SCHEMAS`
* `UPDATE_SCHEMAS`
* `DELETE_SCHEMAS`
* `DISABLE_SCHEMAS`

For the task commands

* `CREATE_TASK_FUNCTION`
* `VIEW_TASK_FUNCTIONS`
* `VIEW_TASK_FUNCTION_DETAILS`
* `DELETE_TASK_FUNCTION`
* `UPDATE_TASK_FUNCTION`

For tasks using the `executionCredentials` feature, the user also needs:

* `VIEW_USER`
* `CREATE_ROLE`
* `VIEW_ROLE`
* `UPDATE_ROLE`
* `DELETE_ROLE`
* `ADD_ROLE_PERMISSION`
* `REMOVE_ROLE_PERMISSION`
* `ADD_ROLE_TO_USER`
* `REMOVE_ROLE_FROM_USER`

For the dispatchers commands

* `CREATE_DISPATCHERS`
* `UPDATE_DISPATCHERS`
* `DELETE_DISPATCHERS`
* `VIEW_DISPATCHERS`

For the template commands

* `CREATE_TEMPLATES`
* `VIEW_TEMPLATES`
* `UPDATE_TEMPLATES`
* `DELETE_TEMPLATES`

For the localization commands

* `CREATE_LOCALIZATIONS`
* `UPDATE_LOCALIZATIONS`
* `DELETE_LOCALIZATIONS`

For the settings commands

* `UPDATE_USER_VERIFICATION_SETTINGS`
* `UPDATE_USER_SERVICE_EMAIL_TEMPLATES`
* `UPDATE_PASSWORD_POLICY`
* `UPDATE_FILE_SERVICE_SETTINGS`