LumiCode permissions reference

This reference lists what each LumiCode feature needs from your LUSID domain: the licences FINBOURNE grants your domain, and the permissions your administrator grants you. LumiCode always acts as the user you're signed in as, so it can only show and change what that user is entitled to.

Installing and updating

Feature	Domain licences	User permissions
Downloading and installing LumiCode, `/update`	`honeycomb-binary-downloads` and `honeycomb-binary-download-lumi-code`	The `DownloadBinary` feature activity for `LumiCode` in the `Honeycomb` scope. Users with the `lusid-administrator` role have it by default. See How do I install LumiCode?
`/binaries`	`honeycomb-binary-downloads`, plus the licence for each binary	The `DownloadBinary` feature activity for each binary
`/certificates`	None beyond Luminesce	Permission to view and download your client certificates in Luminesce

Querying

Feature	What you need
Running a query or a multi-query	Permission to execute each provider the query uses, exactly as in the web Query Editor
`/catalog`, and completion of provider and field names	Nothing extra. You see the providers you're entitled to use.
View details and dependencies in `/catalog`	Permission to query `Sys.File` and `Sys.Dependency` *
`/lineage`	Nothing extra
`/ai`, and Candela everywhere else in LumiCode	Candela enabled for your domain. It's currently available to some customers only.

* These are generally available to all Luminesce users, as all of Luminesce's user interfaces need them for various purposes.

History and diagnosis

Each history command shows your own entries to everyone who can run it. Show Extra adds everyone else's in your domain, for users with the extra permission below.

Feature	Your own entries	Everyone's entries
`/history`, `/results`	Permission to query `Sys.Logs.HcQuery` *	The `GlobalMetadataVisibility` activity on `Sys.Logs.HcQuery`
`/api-history`	Permission to query `Lusid.Logs.AppRequest` *	The `GlobalMetadataVisibility` activity on `Lusid.Logs.AppRequest`
`/access-history`	Permission to query `Lusid.Logs.Metrics.Entitlement` *	The Insights `accesslogs-view-all` permission
`/diagnose`	Access to the `Sys.Logs.` providers . For FINBOURNE users there are other providers allowing for even more information, which will be used when available.