# User permissions managed object and inventory

**URL:** <https://community.cumulocity.com/t/user-permissions-managed-object-and-inventory/7647>\
**Category:** Forum\
**Tags:** cumulocity\
**Created:** [April 11, 2024, 9:34am UTC](https://community.cumulocity.com/t/user-permissions-managed-object-and-inventory/7647 "2024-04-11T09:34:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![hgansmueller](https://avatars.discourse-cdn.com/v4/letter/h/91b2a8/32.png) [@hgansmueller](https://community.cumulocity.com/u/hgansmueller)\
**Post date:** [April 11, 2024, 9:34am UTC](https://community.cumulocity.com/t/user-permissions-managed-object-and-inventory/7647/1 "2024-04-11T09:34:40Z")

</div>

#### _ **Product/components** used and **version/fix** level:_

Cumulocity 1018.0.281

#### _Question related to a **free trial** , or to a **production (customer)** instance?_

production

Hi all,

on page user permissions I see “managed object” and “inventory” but I can´t find explanation to “managed object” in the documentation. what is the difference between them or for what is “managed objects”?

thx

greets

Helmut

---

<div class="post-metadata">

**Author:** ![Robert\_Neale](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/robert_neale/32/31965_2.png) [@Robert\_Neale](https://community.cumulocity.com/u/Robert_Neale)\
**Post date:** [April 11, 2024, 10:32am UTC](https://community.cumulocity.com/t/user-permissions-managed-object-and-inventory/7647/2 "2024-04-11T10:32:48Z")

</div>

This in 10.18 release notes…

 ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/c/1/c1937e69076fc4675160a37ac9d568c90e5b4b62.png)

Background:  
"The Device user currently needs INVENTORY\_CREATE permissions to create the managed objects. But this permissions elevate him to upload Binaries to the platform. This is a security concern "  
“To improve security, the inventory role permissions have been split up into separate roles for the managed objects and binaries. This allows to assign more granular permissions. The existing permissions will still work.”

So Inventory=managed objects + binaries

---

<div class="post-metadata">

**Author:** ![hgansmueller](https://avatars.discourse-cdn.com/v4/letter/h/91b2a8/32.png) [@hgansmueller](https://community.cumulocity.com/u/hgansmueller)\
**Post date:** [April 11, 2024, 11:02am UTC](https://community.cumulocity.com/t/user-permissions-managed-object-and-inventory/7647/3 "2024-04-11T11:02:26Z")

</div>

Hi Robert,  
thx for you answer. Now it is clear.

greets

Helmut

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/system/32/31990_2.png) [@system](https://community.cumulocity.com/u/system)\
**Post date:** [October 8, 2024, 11:02am UTC](https://community.cumulocity.com/t/user-permissions-managed-object-and-inventory/7647/4 "2024-10-08T11:02:56Z")

</div>

Closed on October 8, 2024, 11:02am UTC

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.