# Permissions required by the CLI

The Extra Horizon CLI requires certain permissions to function correctly. If you, for example, want to create a dedicated user for running commands in a CI/CD pipeline, you need to ensure that this user has the following global permissions:

For the schema commands

* `CREATE_SCHEMAS`
* `UPDATE_SCHEMAS`
* `DELETE_SCHEMAS`
* `DISABLE_SCHEMAS`

For the task commands

* `CREATE_TASK_FUNCTION`
* `VIEW_TASK_FUNCTIONS`
* `VIEW_TASK_FUNCTION_DETAILS`
* `DELETE_TASK_FUNCTION`
* `UPDATE_TASK_FUNCTION`

For tasks using the `executionCredentials` feature, the user also needs:

* `VIEW_USER`
* `CREATE_ROLE`
* `VIEW_ROLE`
* `UPDATE_ROLE`
* `DELETE_ROLE`
* `ADD_ROLE_PERMISSION`
* `REMOVE_ROLE_PERMISSION`
* `ADD_ROLE_TO_USER`
* `REMOVE_ROLE_FROM_USER`

For the dispatchers commands

* `CREATE_DISPATCHERS`
* `UPDATE_DISPATCHERS`
* `DELETE_DISPATCHERS`
* `VIEW_DISPATCHERS`

For the template commands

* `CREATE_TEMPLATES`
* `VIEW_TEMPLATES`
* `UPDATE_TEMPLATES`
* `DELETE_TEMPLATES`

For the localization commands

* `CREATE_LOCALIZATIONS`
* `UPDATE_LOCALIZATIONS`
* `DELETE_LOCALIZATIONS`

For the settings commands

* `UPDATE_USER_VERIFICATION_SETTINGS`
* `UPDATE_USER_SERVICE_EMAIL_TEMPLATES`
* `UPDATE_PASSWORD_POLICY`
* `UPDATE_FILE_SERVICE_SETTINGS`