# Workflow Permissions Matrix

To access and work in TD Workflow, permissions must be granted by the account administrator or owner. You can read more about [permissions](/products/control-panel/security/policies/about-policies-and-permissions).

Workflow permission options on the control panel are View, Run, and Edit. You can use permissions in combinations such as:

* Edit
* Run
* View + Edit
* Run + Edit


The following table shows actions and permissions that must be set and commands that can be run from the command-line interface (CLI).

| Action | Required Permissions to take action from UI | Commands from CLI in TD Toolbelt | Required Permissions (set in the UI) to run commands from CLI |
|  --- | --- | --- | --- |
| Create workflow | Global or Project-Level 'Edit' Permissions | n/a | 'Edit' |
| Create workflow project | Global 'Edit' Permission | n/a | 'Edit' |
| Run TD workflow and other client mode commands locally (on the client only) | n/a | `td wf run`
`td wf init`
`td wf check`
`td wf scheduler`
`td wf selfupdate` | n/a |
| Run workflow from TD Console | 'View' and 'Run' | n/a | n/a |
| Submit workflow to TD | n/a | `td wf push` | 'Edit' |
| List the workflows registered on Treasure Data | 'View' | `td wf workflows` | 'View' |
| Find out what workflows are scheduled to run next on Treasure Data | 'View' | `td wf schedules` | 'View' |
| Download Workflow | n/a | `td wf download` | 'View' |
| Workflow secrets, setting, listing, deleting | 'View' and 'Edit' | `td wf secrets` | 'View' and 'Edit' |
| Start a workflow | 'View' and 'Run' | `td wf start` | 'View' and 'Run' |
| Check failure status | 'View' | `td wf sessions` | 'View' |
| Check logs | 'View' | `td wf logs` | 'View' |
| List or view workflow tasks | 'View' | `td wf tasks` | 'View' |
| Retry Workflow | 'View' and 'Run' | `td wf retry` | 'View' and 'Run' |
| Kill workflow | 'View' and 'Run' | `td wf kill` | 'Run' |
| Start sessions of a schedule for past times | 'View' and 'Run' | `td wf backfill` | 'View' and 'Run' |
| Skip sessions of a schedule to a future time | 'View' and 'Run' | `td wf reschedule` | 'View' and 'Run' |
| Disable a workflow schedule | 'View' and 'Run' | `td wf disable` | 'View' and 'Run' |
| Enable a workflow schedule | 'View' and 'Run' | `td wf enable` | 'View' and 'Run' |
| Show attempts for a session | 'View' | `td wf attempts` | 'View' |
| Kill a running session attempt | 'View' and 'Edit' | `td wf delete` | 'View' and 'Edit' |
| Show workflow projects | 'View' | `td wf projects` | 'View' |