Sonatype CLM Server - Policy Management Guide
Security administration can’t really begin to take place until your first organization and application are created. This will need to be done by an administrator, as demonstrated in the examples above.
Once created, each organization and application has two available roles displayed in the Security section of the application and organization overview.
- Owner
- has full access to manage policy for the assigned organization or application.
- Developer
- has view only access for the assigned organization or application.
Note
Assigning a person to an organization role grants the same permissions to the applications within that organization.
Once you understand permissions, you can develop policies. Communicate with others to avoid micromanagement. If you don’t have access to create an organization-level policy, it doesn’t mean that it wouldn’t benefit to create policy for applications within that organization.