Issue
When using Snyk CLI or IDE plugins, users may see an error message when trying to run a snyk test
or snyk code test
:
user does not have required permission on org
Discussion
When setting up a Custom Role the minimum permissions for testing via the Snyk IDE plugin or via the Snyk CLI, even when testing Snyk Code, are the set of permissions listed in the documentation for the sample read-only CLI tester .
Note that even for Snyk Code, which consists of the Snyk Code Security feature and the Snyk Code Quality feature in the IDE, the Test Packages
permission is required.
Resolution
If your Snyk Plan includes creating and modifying Member Roles and you have defined permissions for a custom role, be sure to include the minimum set of permissions to allow for CLI testing, on appropriate roles.
Following the Sample Roles permission guides is a useful start.