---
title: Privileges required to manage snapshots
slug: '3357'
canonical_url: https://docs.coveo.com/en/3357/
collection: manage-an-organization
source_format: adoc
---
# Privileges required to manage snapshots
Like with any other feature of the [Coveo Administration Console](https://docs.coveo.com/en/183/), your [privileges](https://docs.coveo.com/en/228/) determine what you can do with the [resource](https://docs.coveo.com/en/2820/) snapshot feature.
For example, you may be able to create a snapshot, but not apply it to an organization, as this action requires additional privileges.

However, resource snapshots provide access to the configuration of other resources, such as [sources](https://docs.coveo.com/en/246/), [fields](https://docs.coveo.com/en/200/), and [query pipelines](https://docs.coveo.com/en/180/).
Therefore, in addition to the privileges required to manage snapshots, you must also have the privileges to view or edit all resources included in a snapshot.

This requirement prevents [privilege escalation](https://en.wikipedia.org/wiki/Privilege_escalation), that is, using the snapshot feature to access the configuration of a resource you wouldn't otherwise be able to access.

In other words, you can't leverage the snapshot feature to view or edit a resource’s configuration unless your privileges allow you to view or edit this resource outside of the snapshot feature.

The table below lists the privileges required to manage snapshots.
Lines in italics remind you that the complete set of privileges you need depends on the content of your snapshot.

See [Manage privileges](https://docs.coveo.com/en/3151/) for details on how privileges work and [Privilege reference](https://docs.coveo.com/en/1707/) for further information about each privilege.

**Example**
<details><summary>Details</summary>

Your privilege set includes the following privileges:

* View all [query pipelines](https://docs.coveo.com/en/180/) in your [organization](https://docs.coveo.com/en/185/)
* Edit pipeline `ABC` only
* Organization - Snapshot: Edit

To create a snapshot, you need the privilege to edit a snapshot, which you have.
You also need the privilege to view the resources you include in the snapshot, which you also have for all pipelines.
Therefore, you can create a snapshot that contains all pipelines in your organization.

However, to apply a snapshot to an organization, you need the privilege to edit the snapshot, which you have, and the privilege to edit all resources included in the snapshot, which you don't have since you can only edit pipeline `ABC`.
Therefore, you can't apply this snapshot to an organization since you're not allowed to edit all pipelines.

</details>

[cols="~,~,~",options="header"]
|===
|Action
|Service - Domain
|Required access level

.3+.^|Create a snapshot of an organization
|Organization - Organization
|View

|_All [domains](https://docs.coveo.com/en/2819/) corresponding to the resources to include in the snapshot_
|View

|Organization - Snapshot
|Edit

.2+.^|Create a snapshot from JSON or ZIP
|Organization - Organization
|View

|Organization - Snapshot
|Edit

.3+.^|Copy or download a snapshot
|Organization - Organization
|View

|Organization - Snapshot
|View

|_All domains corresponding to the resources in the snapshot_
|View

.3+.^|Copy a snapshot to another organization
|Organization - Organization
|View

|_All domains corresponding to the resources (from the origin organization) in the snapshot_
|View

|Organization - Snapshot (in both the origin and the destination organization)
|Edit

.3+.^|Match analogous resources
|Organization - Organization
|View

|Organization - Link
|Edit

|Organization - Snapshot
|Edit

.2+.^|Import sensitive information
|Organization - Vault entry (in the origin organization)
|View

|Organization - Vault entry (in the destination organization)
|Edit

.4+.^|View changes to apply
|Organization - Link
|View

|Organization - Organization
|View

|_All domains corresponding to the resources in the snapshot_
|View

|Organization - Snapshot
|Edit

.5+.^|Apply a snapshot
|Organization - Organization
|View

|Organization - Link
|Edit

|Organization - Snapshot
|Edit

|Organization - Vault entry (if the snapshot contains sensitive information)
|Edit

|_All domains corresponding to the resources in the snapshot_
|Edit

.2+.^|Delete a snapshot
|Organization - Organization
|View

|Organization - Snapshot
|Edit
|===

## What's next?

Read on how [Coveo matches analogous resources](https://docs.coveo.com/en/3355/) to determine how to apply your resource snapshots.
This article is recommended for advanced users only.