Customer accounts settings

A viewer can inspect settings while the caller-owned policy disables mutation.

All resourcesResource activity
GeneralAccessDanger

Resource configuration

Identity, visibility, retention, and notifications remain application-owned values.

Administrator access required
This signed-in viewer can inspect resource settings but cannot change them.
Resource configuration

Retention changes apply to new records after the next successful synchronization.

Notify resource owners after imports or synchronization fail.