Resource Roles (Permissions)

What users can see and do with a resource, such as a document, content item, or site, depends on the role (or permission) they’re assigned when the resource is shared with them. For example, they might be the manager of one site, a contributor to a folder, or a viewer for another site.

The basic permissions of the roles are described here, but different resources handle permissions slightly differently, as described in the sections in this topic. Also note that, resource roles are cumulative. That is, the Downloader role has all the privileges of the Viewer role with added privileges. The Contributor role has all the privileges of both the Viewer and Downloader roles, and so on.

Viewer: Viewers can view the resource but can’t change anything.
Downloader: Downloaders can download the resource or its associated files and save them to their own computer.
Contributor: Contributors can edit the resource. Depending on the type of resource, this might mean they can rename it, edit tags or properties, and other similar tasks.
Manager: Managers have full control of the resource (with the exception of folders, see below), including adding users as members and assigning them roles for the resource.

When you create a resource, you’re automatically assigned as the Owner of the resource (with the exception of resources created in shared folders). This gives you full control of the resource. It also means that you can't be removed from the resource and your role can't be changed.

As a service administrator, you can also set a default role to assign to new users that are added to a folder.

To view the roles for a particular resource, click one of the following links:

Asset Types

You must have the enterprise user role, content administrator role, and one of the listed resource roles to perform the following tasks with asset types.

Task	Owner	Manager
View an asset type (in the Administration: Content area) You control users ability to use an asset type through settings in the repository.
Create an asset type Any user with the enterprise user role and content administrator role can create asset types.	N/A	N/A
Edit an asset type
Share an asset type
Delete an asset type

Assets

You must have the enterprise user role and one of the listed resource roles to perform the following tasks with assets. Access to assets can be refined based on asset types and taxonomy categories using granular permissions in the parent repository.

Task	Manager	Contributor	Viewer
View an asset You need one of these roles for the repository where the asset is managed.
Create or upload an asset You need one of these roles for the repository where the asset will be created and the asset type used to create the asset, and the asset type used to create the asset must be associated with the repository.
Edit an asset (asset, tags, collections, properties, upload new version of digital asset) You need one of these roles for the repository where the asset is managed.
Publish an asset You need at least Viewer access to the parent repository, plus one of these roles for the publishing channel that will be used to publish the asset.
Move an asset through workflow You need at least Viewer access, plus any required workflow role.
Delete an asset You need one of these roles for the repository where the asset is managed.
Download a digital asset You need one of these roles for the repository where the asset is managed.

Audience Attributes

If you have the enterprise user role and content administrator role you can perform any task with audience attributes.

Collections

You must have the enterprise user role, at least view access to the parent repository, and one of the listed resource roles to perform the following tasks with collections.

Task	Manager	Contributor	Viewer
View a collection
Create a collection You need one of these roles for the repository in which you create the collection.
Add an asset to collection (digital asset, content item, or document) To add an asset to the collection, you one of these roles for the collection. To create a new asset directly in the collection, you need one of these roles for the parent repository (to create the asset), and one of these roles in the collection (to add the asset to the collection).
Remove an asset from collection Note: Removing an asset from the collection, doesn't delete the asset from the parent repository.
Edit a collection (rename, properties)
Share a collection

Components and Layouts

If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with components and layouts.

Task	Owner	Manager	Contributor	Downloader	Viewer
View a component or layout (component/layout and properties in the Developer area) To use content layouts, content field editors, and content forms in asset types, users need to be able to create or edit asset types, and the content field editors and content forms must be promoted.
Create a component or layout Any user with the standard user or enterprise user role can create components or layouts. Note: If your service administrator limited component creation to site administrators, you must be a site administrator.	N/A	N/A	N/A	N/A	N/A
Edit a component or layout (edit or upload component or layout files)
Copy or export a component or layout
Delete a component or layout
Share a component or layout

Content Workflows

You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with content workflows.

Task	Manager
View a content workflow Any user with the enterprise user role and repository administrator role can view content workflows.	N/A
Register a content workflow Any user with the enterprise user role and repository administrator role can register content workflows.	N/A
Disable a content workflow
Unregister a content workflow
Share a content workflow

Conversations

If you have a standard user or enterprise user role, you can create conversations. To view and participate in a conversation, you must be a member of the stand-alone conversation or have access to the resource associated with the conversation.

Editorial Roles

You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with editorial roles.

Task	Owner	Manager
View an editorial role Any user with the enterprise user role and repository administrator role can view editorial roles.	N/A	N/A
Create an editorial role Any user with the enterprise user role and repository administrator role can create editorial roles.	N/A	N/A
Edit an editorial role
Copy an editorial role Any user with the enterprise user role and repository administrator role can copy editorial roles.	N/A	N/A
Share an editorial role
Delete an editorial role

Experiences

If you have the enterprise user role and developer application role you can perform any task with experiences.

Files and Folders

If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with files and folders.

Task	Owner	Manager	Contributor	Downloader	Viewer
Upload a file Any user can upload top-level files. To upload a file to a folder, you need one of these roles on the parent folder.
Create a folder Any user can create top-level folders. To create a subfolder, you need one of these roles on the parent folder.
View a file or folder For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder.
View the properties, tags, and metadata For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder.
View the file access history and versions For top-level files, you must be the owner. For other files, you need one of these roles on the parent folder.
Edit the properties, tags, and metadata For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Configure public link settings for a folder
Edit custom property values
Collaborate on a file or folder (file annotations and conversation) For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Move a file or folder For top-level files or top-level folders, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. Moves must be made to a target folder with the same owner as the source folder.
Copy a file or folder For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. Copies must be made to a folder you own or to a folder where you have the Contributor Manager roll (write permissions).
Rename a file or folder For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Download a file or folder For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Share members-only links to a file or folder For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Share public links to a file or folder For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Upload a new version of a file For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files, you need one of these roles on the parent folder.
Lock a file For top-level files, you must be the owner. For other files, you need one of these roles on the parent folder.
Delete a file or folder For top-level files and top-level folders, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder.
Manage members for a folder You need one of these roles on the folder itself or the parent folder.

Localization Policies

If you have the enterprise user role and repository administrator role you can perform any task with localization policies.

Publishing Channels

You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with publishing channels.

Task	Owner	Manager	Viewer	Contributor
View a publishing channel
Create a publishing channel Any user with the enterprise user role and repository administrator role can create publishing channels.	N/A	N/A	N/A	N/A
Edit a publishing channel
Share a publishing channel
Delete a publishing channel
Publish assets

Ranking Policies

If you have the enterprise user role and content administrator role you can perform any task with ranking policies.

Recommendations

You must have the enterprise user role and one of the listed resource roles to perform the following tasks with recommendations.

Task	Manager	Contributor	Viewer
View a recommendation You need one of these roles for the parent repository.
Create a recommendation You need one of these roles for the repository where the recommendation will be created.
Edit a recommendation You need one of these roles for the parent repository.
Move a recommendation through workflow You need at least Viewer access to the parent repository, plus any required workflow role.
Publish a recommendation You need at least Viewer access to the parent repository, plus one of these roles for the publishing channel that will be used to publish the recommendation.
Delete a recommendation You need one of these roles for the parent repository.

Rendition Policies

If you have the enterprise user role and content administrator role you can perform any task with rendition policies.

Repositories

You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with repositories. Access to assets can be refined based on asset types and taxonomy categories using granular permissions in the parent repository.

Task	Manager	Contributor	Viewer
View a repository
Create a repository You need one of these roles for any asset types and publishing channels you want to assign to the repository.
Edit a repository
Share a repository
Delete a repository

Sites

If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with sites.

Task	Owner	Manager	Contributor	Downloader	Viewer
View a site Viewers can view site properties and members. Other roles can also preview the site, or open the site to view or add annotations or participate in the associated conversation.
Create a site You need one of these roles for the template used to create the site. Note: Your service administrator can disable site creation or limit site creation to site administrators. If you don’t see the Create option on the Sites page, contact your service administrator.
Edit a site (including change status) Only owners and managers can rename a site.
Copy a site
Delete a site
Share a site
Create a template from a site

Taxonomies

You must have the enterprise user role; content administrator role or repository administrator role; and one of the listed resource roles to perform the following tasks with taxonomies.

Task	Manager	Editor
View a taxonomy
Create a taxonomy Any user with the enterprise user role and content administrator role can create taxonomies. Repository administrators can't create taxonomies.	N/A	N/A
Import a taxonomy Any user with the enterprise user role and content administrator role can import taxonomies. Repository administrators can't import taxonomies.	N/A	N/A
Edit a taxonomy
Promote a taxonomy
Publish a taxonomy
Share a taxonomy
Export a taxonomy
Delete a taxonomy

Templates

If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with templates.

Task	Manager	Contributor	Downloader	Viewer
View a template
Create a template If you’re creating a template from an existing site, you need one of these roles for the existing site. Note: If your service administrator limited template creation to site administrators, you must be a site administrator.
Edit a template (edit or upload template files, rename)
Copy or export a template
Delete a template
Share a template

Themes

If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with themes.

Task	Owner	Manager	Contributor	Downloader	Viewer
View a theme
Publish a theme
Copy a theme
Delete a theme
Share a theme

Workflow Roles

If you have the enterprise user role and repository administrator role you can assign users to workflow roles. All members of a workflow role can perform the action defined for the role.