Durable Objects do not have separate roles or permissions. Access to a Durable Object is determined by your access to the Worker that implements it.
To give a member, User Group, or API token access to a Durable Object, assign the appropriate Workers role at either the individual Worker scope or the Workers product scope. Refer to Workers roles and permissions for available roles and scopes.
Metadata Read-Only access to the implementing Worker includes Durable Object metrics, logs, and traces without granting access to data stored in the Durable Object. Granular authorization supports analytics for both SQLite-backed and KV-backed Durable Objects, with one current exception: the Total KV storage metric is unavailable for KV-backed Durable Objects.
Durable Objects Data Studio can query and modify data stored in SQLite-backed Durable Objects. Accessing Data Studio requires at least Editor access to the Worker that implements the Durable Object.