# app:create

Last edited on 30 Jun 2025

## Permission Summary

Create App Platform apps

## Required Permissions

To add a permission to a custom role, you must also add its required permissions.

For example, to add a non-read permission for a resource type, you must also add the read permission for that resource type.

The following permissions are required for `app:create`:

| Permission | Description |
|---|---|
| [`app:read`](../../app/read) | View App Platform apps |

## Associated Permissions

Associated permissions are not required, but they support full functionality of the permission they’re associated with.

For example, to create a Droplet, you need `droplet:create`. To tag a Droplet during creation, you additionally need `tag:create`, so `tag:create` is listed as an associated permission for `droplet:create`.

The following permissions are associated with `app:create`:

| Permission | Description |
|---|---|
| [`app:access_console`](../../app/access_console) | Access console of App Platform apps |
| [`database:create`](../../database/create) | Create Managed Databases |
| [`database:update`](../../database/update) | Update Managed Databases |
| [`database:view_credentials`](../../database/view_credentials) | View Databases Credentials |
| [`project:update`](../../project/update) | Modify projects |
| [`registry:read`](../../registry/read) | View container registries |
| [`registry:create`](../../registry/create) | Create container registries |
| [`function:read`](../../function/read) | View Serverless function namespaces and triggers |
| [`function:create`](../../function/create) | Create Serverless function namespaces and triggers |