--- title: RBAC Role — Endpoint Cross-reference description: Server RBAC Role -- Rest API endpoint cross reference tabley pubDate: 2026-08-17T09:53:44.266Z antora: editUrl: https://github.com/couchbase/docs-sync-gateway/edit/release/3.0/modules/ROOT/pages/rest-api-access-rbac-roles.adoc xref: xref:3.0@sync-gateway::rest-api-access-rbac-roles.adoc[] --- [Consult the llms.txt file for a full list of contents](/llms.txt) [View original HTML](/sync-gateway/3.0/rest-api-access-rbac-roles.html) # RBAC Role — Endpoint Cross-reference > Server RBAC Role — Rest API endpoint cross reference tabley Related _REST API_ topics: [Public REST API](rest-api.md) | [Admin REST API](rest-api-admin.md) | [Metrics REST API](rest-api-metrics.md) ## [](#admin)Admin The table below identifies the RBAC roles required by Sync Gateway to execute endpoint actions. **Couchbase Server 7.0.2 Developer Preview** introduces new roles offering fine grained access control; existing roles will remain available. For more on RBAC roles, see the Couchbase Server documentation: [Couchbase Server Authorization Roles](../../server/current/learn/security/roles.md) __Table 1\. REST API Admin Endpoints__ | Rest API Endpoint | Couchbase Server Roles | | | | | ----------------- | ------------------------------------ | ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ | | Scope | Endpoint | Method | All Versions | 7.0.2Developer Preview | | Cluster | /\_all\_dbs | GET / HEAD | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_config | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_config | PUT | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/fgprof | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/fgprof | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/block | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/block | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/cmdline | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/cmdline | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/goroutine | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/goroutine | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/heap | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/heap | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/mutex | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/mutex | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/profile | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/profile | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/symbol | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/symbol | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/threadcreate | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/threadcreate | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/trace | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_debug/pprof/trace | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_expvar | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops, External Stats Reader | | Cluster | /\_heap | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_logging | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_logging | PUT / POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_post\_upgrade | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_profile | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_profile/{profilename} | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_sgcollect\_info | DELETE | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_sgcollect\_info | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /\_sgcollect\_info | POST | Cluster Admin Role, Full Admin Role, | Sync Gateway Dev Ops | | Cluster | /\_stats | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops, External Stats Reader | | Cluster | /\_status | GET | Cluster Admin Role, Full Admin Role, Read Only Admin, | Sync Gateway Dev Ops | | Cluster | /{db}/ | DELETE | Cluster Admin Role, Full Admin Role, | Sync Gateway Architect | | Cluster | /{db}/ | PUT | Cluster Admin Role, Full Admin Role, | Sync Gateway Architect | | DB | /\_compact | POST | Sync Gateway Role. Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_config/import\_filter | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config/import\_filter | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config/import\_filter | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config/sync | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config/sync | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_config/sync | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_dump/{view} | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_dumpchannel/{channel} | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_flush | POST | ![Sync%20Gateway%20Role%2C%20Bucket%20Admin%2C%20%0ABucket%20Application%20Access%2C%20%0AFull%20Admin](Sync%20Gateway%20Role%2C%20Bucket%20Admin%2C%20%0ABucket%20Application%20Access%2C%20%0AFull%20Admin.png) | Sync Gateway Dev Ops | | DB | /\_offline | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_online | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_purge | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_raw/{docid} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_repair | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_replication/ | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replication/ | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replication/{replicationID} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replication/{replicationID} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replication/{replicationID} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replicationStatus | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replicationStatus/{replicationID} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_replicationStatus/{replicationID} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Replicator | | DB | /\_resync | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect | | DB | /\_resync | POST | | Sync Gateway Architect | | DB | /\_revtree/{docid} | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_role/ | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_role/ | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_role/{name} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_role/{name} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_role/{name} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_session | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_session/{sessionid} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_session/{sessionid} | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_user/ | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_user/ | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_user/{name} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_user/{name} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_user/{name} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_user/{name}/\_session | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_user/{name}/\_session/{sessionid} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Architect, Sync Gateway Application | | DB | /\_view/{view} | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | ## [](#common-endpoints)Common Endpoints __Table 2\. Common Endpoints (with Admin)__ | Rest API Endpoint | Couchbase Server Release | | | | | ----------------- | ------------------------------ | ----------------- | ---------------------------------------------------------------------- | ------------------------------------------------------------ | | Scope | Endpoint | Method | Pre 7.0.2 | 7.0.2+ | | Cluster | /{db}/ | GET / HEAD | Cluster Admin Role, Full Admin Role Read Only Admin | Sync Gateway Dev Ops | | Cluster | /{db}/ | POST | Cluster Admin Role, Full Admin Role | Sync Gateway Application | | DB | /\_all\_docs | GET / HEAD / POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_bulk\_docs | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_bulk\_get | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_changes | GET / HEAD / POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_design/{ddoc} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_design/{ddoc} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_design/{ddoc} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_design/{ddoc}/\_view/{view} | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_ensure\_full\_commit | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_revs\_diff | POST | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_local/{docid} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /\_local/{docid} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_local/{docid} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /{docid} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /{docid} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway ApplicationSync Gateway Application | | DB | /{docid} | DELETE | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /{docid}/{attach} | GET / HEAD | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application, Sync Gateway Application Read Only | | DB | /{docid}/{attach} | PUT | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | | DB | /\_blipsync | GET | Sync Gateway Role, Bucket Admin, Bucket Application Access, Full Admin | Sync Gateway Application | ## [](#metrics-endpoints)Metrics Endpoints __Table 3\. REST API Admin Endpoints__ | Rest API Endpoint | Couchbase Server Release | | | | | ----------------- | ------------------------ | ------ | ---------------------------------------------------- | ------------------------------------------- | | Scope | Endpoint | Method | Pre 7.0.2 | 7.0.2+ | | Cluster | /\_metrics | GET | Cluster Admin Role, Full Admin Role, Read Only Admin | Sync Gateway Dev Ops, External Stats Reader | --- ##### ## [](#related-content)Related Content ###### [](#-2) API Topics * [Public REST API](rest-api.md) * [Admin REST API](rest-api-admin.md) * [Metrics REST API](rest-api-metrics.md) ###### [](#-3) Reference * [Bootstrap](configuration-schema-bootstrap.md) * [Database](configuration-schema-database.md) * [Database Security](configuration-schema-db-security.md) * [Access Control](configuration-schema-access-control.md) * [Import Filter](configuration-schema-import-filter.md) * [Inter-Sync Gateway Replication](configuration-schema-isgr.md) * [Legacy Pre-3.0 Configuration](configuration-properties-legacy.md) ###### [](#-4) Community [Mobile Forum](https://forums.couchbase.com/c/mobile/14) | [Blog](https://blog.couchbase.com/) | [Blog (Mobile)](https://blog.couchbase.com/category/couchbase-mobile/?ref=blog-menu) | [Tutorials](https://docs.couchbase.com/tutorials/)