# MLflow (/docs/reference/roles-permissions/mlflow)



AI Viewer and AI Builder are MLflow functional roles. AI Viewer grants experiment, run, registry and trace reads; AI Builder includes those reads and the supported writes. Tenant administration alone does not grant those functional permissions.

Prompts and logged models use `mlflow.model.*`. Evaluation datasets use `mlflow.experiment.*`. Some compound operations require two permissions, such as linking a prompt version to a run (`mlflow.model.update` and `mlflow.run.update`).

Workspace and webhook permissions use a different rule: membership supplies the operation gate, while workspace access decides the result. Current members can read their tenant's workspaces. The workspace owner, tenant administrator or platform administrator can manage the workspace and its webhooks, subject to the API's tenant-context checks. Creating a workspace requires `mlflow.workspace.create`.

Workspace management does not redirect experiment, run, registry or trace APIs into that workspace. Those APIs use MLflow's default workspace; webhooks are workspace-aware. The permissions listed here are not a claim that every MLflow entity is isolated by workspace.

Deleting experiments and runs is reversible through their restore operations, which require the corresponding **delete** permission. Registry deletion is permanent. Model promotion changes stages or aliases; runtime deployment requires the separate platform permission.

## Permissions [#permissions]

This family contains **30 permissions**. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.

<Catalogue>
  <details className="catalogue-entry">
    <summary>
      ### mlflow\.experiment.create [#mlflowexperimentcreate]

      <span className="catalogue-description">
        Create an MLflow experiment or an associated evaluation dataset through the supported API.
      </span>
    </summary>

    <div className="catalogue-content">
      Create an MLflow experiment or an associated evaluation dataset through the supported API.

      | Property     | Value                                                                                                                                                                            |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                  |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                                          |
      | Custom role  | Yes                                                                                                                                                                              |
      | Also implies | [mlflow.experiment.list](/docs/reference/roles-permissions/mlflow#mlflowexperimentlist), [mlflow.experiment.read](/docs/reference/roles-permissions/mlflow#mlflowexperimentread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.experiment.delete [#mlflowexperimentdelete]

      <span className="catalogue-description">
        Soft-delete or restore an experiment, or delete an associated evaluation dataset through its API.
      </span>
    </summary>

    <div className="catalogue-content">
      Soft-delete or restore an experiment, or delete an associated evaluation dataset through its API. Dataset deletion is distinct from experiment soft deletion.

      | Property     | Value                                                                                                                                                                                                                                                                         |
      | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                                                                                                               |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                                                                                                                                       |
      | Custom role  | Yes                                                                                                                                                                                                                                                                           |
      | Also implies | [mlflow.experiment.list](/docs/reference/roles-permissions/mlflow#mlflowexperimentlist), [mlflow.experiment.read](/docs/reference/roles-permissions/mlflow#mlflowexperimentread), [mlflow.experiment.update](/docs/reference/roles-permissions/mlflow#mlflowexperimentupdate) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.experiment.list [#mlflowexperimentlist]

      <span className="catalogue-description">
        List or search visible MLflow experiments.
      </span>
    </summary>

    <div className="catalogue-content">
      List or search visible MLflow experiments.

      | Property     | Value                                                                                                                                          |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                |
      | Granted by   | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role  | Yes                                                                                                                                            |
      | Also implies | [mlflow.experiment.read](/docs/reference/roles-permissions/mlflow#mlflowexperimentread)                                                        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.experiment.read [#mlflowexperimentread]

      <span className="catalogue-description">
        Read an experiment and its supported evaluation-dataset information.
      </span>
    </summary>

    <div className="catalogue-content">
      Read an experiment and its supported evaluation-dataset information.

      | Property    | Value                                                                                                                                          |
      | ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                                                                                |
      | Granted by  | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role | Yes                                                                                                                                            |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.experiment.update [#mlflowexperimentupdate]

      <span className="catalogue-description">
        Change experiment metadata or associated evaluation-dataset tags and experiment associations.
      </span>
    </summary>

    <div className="catalogue-content">
      Change experiment metadata or associated evaluation-dataset tags and experiment associations.

      | Property     | Value                                                                                                                                                                            |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                  |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                                          |
      | Custom role  | Yes                                                                                                                                                                              |
      | Also implies | [mlflow.experiment.list](/docs/reference/roles-permissions/mlflow#mlflowexperimentlist), [mlflow.experiment.read](/docs/reference/roles-permissions/mlflow#mlflowexperimentread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.model.create [#mlflowmodelcreate]

      <span className="catalogue-description">
        Create registered models or versions, prompt versions, or logged models through supported APIs.
      </span>
    </summary>

    <div className="catalogue-content">
      Create registered models or versions, prompt versions, or logged models through supported APIs.

      | Property     | Value                                                                                                                                                        |
      | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |
      | Scope        | Selected tenant                                                                                                                                              |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                      |
      | Custom role  | Yes                                                                                                                                                          |
      | Also implies | [mlflow.model.list](/docs/reference/roles-permissions/mlflow#mlflowmodellist), [mlflow.model.read](/docs/reference/roles-permissions/mlflow#mlflowmodelread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.model.delete [#mlflowmodeldelete]

      <span className="catalogue-description">
        Permanently delete registry objects or versions through supported APIs.
      </span>
    </summary>

    <div className="catalogue-content">
      Permanently delete registry objects or versions through supported APIs. This is not experiment or run soft deletion.

      | Property     | Value                                                                                                                                                                                                                                           |
      | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                                                                                 |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                                                                                                         |
      | Custom role  | Yes                                                                                                                                                                                                                                             |
      | Also implies | [mlflow.model.list](/docs/reference/roles-permissions/mlflow#mlflowmodellist), [mlflow.model.read](/docs/reference/roles-permissions/mlflow#mlflowmodelread), [mlflow.model.update](/docs/reference/roles-permissions/mlflow#mlflowmodelupdate) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.model.list [#mlflowmodellist]

      <span className="catalogue-description">
        List or search registered models, prompt registry entries and logged models through supported APIs.
      </span>
    </summary>

    <div className="catalogue-content">
      List or search registered models, prompt registry entries and logged models through supported APIs.

      | Property     | Value                                                                                                                                          |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                |
      | Granted by   | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role  | Yes                                                                                                                                            |
      | Also implies | [mlflow.model.read](/docs/reference/roles-permissions/mlflow#mlflowmodelread)                                                                  |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.model.promote [#mlflowmodelpromote]

      <span className="catalogue-description">
        Manage model-version stages or aliases and supported prompt aliases.
      </span>
    </summary>

    <div className="catalogue-content">
      Manage model-version stages or aliases and supported prompt aliases. This does not deploy a model to the inference runtime.

      | Property     | Value                                                                                                                                                        |
      | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |
      | Scope        | Selected tenant                                                                                                                                              |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                      |
      | Custom role  | Yes                                                                                                                                                          |
      | Also implies | [mlflow.model.list](/docs/reference/roles-permissions/mlflow#mlflowmodellist), [mlflow.model.read](/docs/reference/roles-permissions/mlflow#mlflowmodelread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.model.read [#mlflowmodelread]

      <span className="catalogue-description">
        Read registry objects, their versions and supported metadata.
      </span>
    </summary>

    <div className="catalogue-content">
      Read registry objects, their versions and supported metadata.

      | Property    | Value                                                                                                                                          |
      | ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                                                                                |
      | Granted by  | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role | Yes                                                                                                                                            |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.model.update [#mlflowmodelupdate]

      <span className="catalogue-description">
        Change registry metadata, tags or supported logged-model state.
      </span>
    </summary>

    <div className="catalogue-content">
      Change registry metadata, tags or supported logged-model state.

      | Property     | Value                                                                                                                                                        |
      | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |
      | Scope        | Selected tenant                                                                                                                                              |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                      |
      | Custom role  | Yes                                                                                                                                                          |
      | Also implies | [mlflow.model.list](/docs/reference/roles-permissions/mlflow#mlflowmodellist), [mlflow.model.read](/docs/reference/roles-permissions/mlflow#mlflowmodelread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.run.create [#mlflowruncreate]

      <span className="catalogue-description">
        Create a run in an accessible experiment.
      </span>
    </summary>

    <div className="catalogue-content">
      Create a run in an accessible experiment.

      | Property     | Value                                                                                                                                                |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                      |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                              |
      | Custom role  | Yes                                                                                                                                                  |
      | Also implies | [mlflow.run.list](/docs/reference/roles-permissions/mlflow#mlflowrunlist), [mlflow.run.read](/docs/reference/roles-permissions/mlflow#mlflowrunread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.run.delete [#mlflowrundelete]

      <span className="catalogue-description">
        Soft-delete or restore an MLflow run.
      </span>
    </summary>

    <div className="catalogue-content">
      Soft-delete or restore an MLflow run.

      | Property     | Value                                                                                                                                                                                                                               |
      | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                                                                     |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                                                                                             |
      | Custom role  | Yes                                                                                                                                                                                                                                 |
      | Also implies | [mlflow.run.list](/docs/reference/roles-permissions/mlflow#mlflowrunlist), [mlflow.run.read](/docs/reference/roles-permissions/mlflow#mlflowrunread), [mlflow.run.update](/docs/reference/roles-permissions/mlflow#mlflowrunupdate) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.run.list [#mlflowrunlist]

      <span className="catalogue-description">
        List or search runs in visible experiments.
      </span>
    </summary>

    <div className="catalogue-content">
      List or search runs in visible experiments.

      | Property     | Value                                                                                                                                          |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                |
      | Granted by   | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role  | Yes                                                                                                                                            |
      | Also implies | [mlflow.run.read](/docs/reference/roles-permissions/mlflow#mlflowrunread)                                                                      |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.run.read [#mlflowrunread]

      <span className="catalogue-description">
        Inspect a run's metrics, parameters, tags and accessible artifacts.
      </span>
    </summary>

    <div className="catalogue-content">
      Inspect a run's metrics, parameters, tags and accessible artifacts.

      | Property    | Value                                                                                                                                          |
      | ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                                                                                |
      | Granted by  | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role | Yes                                                                                                                                            |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.run.update [#mlflowrunupdate]

      <span className="catalogue-description">
        Change run metadata or lifecycle state, log parameters and metrics, or upload artifacts through supported operations.
      </span>
    </summary>

    <div className="catalogue-content">
      Change run metadata or lifecycle state, log parameters and metrics, or upload artifacts through supported operations.

      | Property     | Value                                                                                                                                                |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                      |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                              |
      | Custom role  | Yes                                                                                                                                                  |
      | Also implies | [mlflow.run.list](/docs/reference/roles-permissions/mlflow#mlflowrunlist), [mlflow.run.read](/docs/reference/roles-permissions/mlflow#mlflowrunread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.trace.delete [#mlflowtracedelete]

      <span className="catalogue-description">
        Delete individual traces or a selected batch of traces.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete individual traces or a selected batch of traces.

      | Property     | Value                                                                                                                                                                                                                                           |
      | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                                                                                 |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                                                                                                         |
      | Custom role  | Yes                                                                                                                                                                                                                                             |
      | Also implies | [mlflow.trace.list](/docs/reference/roles-permissions/mlflow#mlflowtracelist), [mlflow.trace.read](/docs/reference/roles-permissions/mlflow#mlflowtraceread), [mlflow.trace.update](/docs/reference/roles-permissions/mlflow#mlflowtraceupdate) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.trace.list [#mlflowtracelist]

      <span className="catalogue-description">
        Search traces in accessible experiments.
      </span>
    </summary>

    <div className="catalogue-content">
      Search traces in accessible experiments.

      | Property     | Value                                                                                                                                          |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                |
      | Granted by   | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role  | Yes                                                                                                                                            |
      | Also implies | [mlflow.trace.read](/docs/reference/roles-permissions/mlflow#mlflowtraceread)                                                                  |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.trace.read [#mlflowtraceread]

      <span className="catalogue-description">
        Read trace details and trace assessments.
      </span>
    </summary>

    <div className="catalogue-content">
      Read trace details and trace assessments.

      | Property    | Value                                                                                                                                          |
      | ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                                                                                |
      | Granted by  | [AI Viewer](/docs/reference/roles-permissions/system-roles#ai-viewer), [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder) |
      | Custom role | Yes                                                                                                                                            |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.trace.update [#mlflowtraceupdate]

      <span className="catalogue-description">
        Change trace tags, link traces to runs, or create, update and delete trace assessments.
      </span>
    </summary>

    <div className="catalogue-content">
      Change trace tags, link traces to runs, or create, update and delete trace assessments.

      | Property     | Value                                                                                                                                                        |
      | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |
      | Scope        | Selected tenant                                                                                                                                              |
      | Granted by   | [AI Builder](/docs/reference/roles-permissions/system-roles#ai-builder)                                                                                      |
      | Custom role  | Yes                                                                                                                                                          |
      | Also implies | [mlflow.trace.list](/docs/reference/roles-permissions/mlflow#mlflowtracelist), [mlflow.trace.read](/docs/reference/roles-permissions/mlflow#mlflowtraceread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.webhook.create [#mlflowwebhookcreate]

      <span className="catalogue-description">
        Create a webhook in an administrable workspace.
      </span>
    </summary>

    <div className="catalogue-content">
      Create a webhook in an administrable workspace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.webhook.delete [#mlflowwebhookdelete]

      <span className="catalogue-description">
        Delete a webhook in an administrable workspace.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete a webhook in an administrable workspace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.webhook.list [#mlflowwebhooklist]

      <span className="catalogue-description">
        List webhooks in a workspace the caller is authorized to administer.
      </span>
    </summary>

    <div className="catalogue-content">
      List webhooks in a workspace the caller is authorized to administer.

      | Property     | Value                                                                                        |
      | ------------ | -------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                              |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role  | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
      | Also implies | [mlflow.webhook.read](/docs/reference/roles-permissions/mlflow#mlflowwebhookread)            |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.webhook.read [#mlflowwebhookread]

      <span className="catalogue-description">
        Read a webhook in an administrable workspace.
      </span>
    </summary>

    <div className="catalogue-content">
      Read a webhook in an administrable workspace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.webhook.update [#mlflowwebhookupdate]

      <span className="catalogue-description">
        Change or test a webhook in an administrable workspace.
      </span>
    </summary>

    <div className="catalogue-content">
      Change or test a webhook in an administrable workspace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.workspace.create [#mlflowworkspacecreate]

      <span className="catalogue-description">
        Create an MLflow workspace associated with the active tenant.
      </span>
    </summary>

    <div className="catalogue-content">
      Create an MLflow workspace associated with the active tenant. The creator receives ownership.

      | Property    | Value                                                                                       |
      | ----------- | ------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                             |
      | Granted by  | [Tenant administrator](/docs/reference/roles-permissions/system-roles#tenant-administrator) |
      | Custom role | Yes                                                                                         |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.workspace.delete [#mlflowworkspacedelete]

      <span className="catalogue-description">
        Delete an MLflow workspace only when the caller has workspace-level delete authority.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete an MLflow workspace only when the caller has workspace-level delete authority.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.workspace.list [#mlflowworkspacelist]

      <span className="catalogue-description">
        List MLflow workspaces the caller can access.
      </span>
    </summary>

    <div className="catalogue-content">
      List MLflow workspaces the caller can access.

      | Property     | Value                                                                                        |
      | ------------ | -------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                              |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role  | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
      | Also implies | [mlflow.workspace.read](/docs/reference/roles-permissions/mlflow#mlflowworkspaceread)        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.workspace.read [#mlflowworkspaceread]

      <span className="catalogue-description">
        Read an accessible MLflow workspace.
      </span>
    </summary>

    <div className="catalogue-content">
      Read an accessible MLflow workspace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### mlflow\.workspace.update [#mlflowworkspaceupdate]

      <span className="catalogue-description">
        Update an MLflow workspace only when the caller has workspace-level update authority.
      </span>
    </summary>

    <div className="catalogue-content">
      Update an MLflow workspace only when the caller has workspace-level update authority.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | No. Baseline tenant membership; access is decided on the individual MLflow workspace.        |
    </div>
  </details>
</Catalogue>

## Related pages [#related-pages]

* [Roles and permissions catalogue](/docs/reference/roles-permissions)
* [System roles and baseline access](/docs/reference/roles-permissions/system-roles)
