Resource Roles (Permissions)
What users can see and do with a resource, such as a document, content item, or site, depends on the role (or permission) they’re assigned when the resource is shared with them. For example, they might be the manager of one site, a contributor to a folder, or a viewer for another site.
The basic permissions of the roles are described here, but different resources handle permissions slightly differently, as described in the sections in this topic. Also note that, resource roles are cumulative. That is, the Downloader role has all the privileges of the Viewer role with added privileges. The Contributor role has all the privileges of both the Viewer and Downloader roles, and so on.
- Viewer: Viewers can view the resource but can’t change anything.
- Downloader: Downloaders can download the resource or its associated files and save them to their own computer.
- Contributor: Contributors can edit the resource. Depending on the type of resource, this might mean they can rename it, edit tags or properties, and other similar tasks.
- Manager: Managers have full control of the resource (with the exception of folders, see below), including adding users as members and assigning them roles for the resource.
When you create a resource, you’re automatically assigned as the Owner of the resource (with the exception of resources created in shared folders). This gives you full control of the resource. It also means that you can't be removed from the resource and your role can't be changed.
As a service administrator, you can also set a default role to assign to new users that are added to a folder.
To view the roles for a particular resource, click one of the following links:
- Asset Types
- Assets
- Audience Attributes
- Collections
- Components and Layouts
- Content Workflows
- Conversations
- Editorial Roles
- Experiences
- Files and Folders
- Localization Policies
- Publishing Channels
- Ranking Policies
- Recommendations
- Rendition Policies
- Repositories
- Sites
- Taxonomies
- Templates
- Themes
- Workflow Roles
Asset Types
You must have the enterprise user role, content administrator role, and one of the listed resource roles to perform the following tasks with asset types.
Task | Owner | Manager |
---|---|---|
View an asset type (in the Administration: Content area)
You control users ability to use an asset type through settings in the repository. |
||
Create an asset type Any user with the enterprise user role and content administrator role can create asset types. |
N/A | N/A |
Edit an asset type | ||
Share an asset type | ||
Delete an asset type |
Assets
You must have the enterprise user role and one of the listed resource roles to perform the following tasks with assets. Access to assets can be refined based on asset types and taxonomy categories using granular permissions in the parent repository.
Task | Manager | Contributor | Viewer |
---|---|---|---|
View an asset You need one of these roles for the repository where the asset is managed. |
|||
Create or upload an asset You need one of these roles for the repository where the asset will be created and the asset type used to create the asset, and the asset type used to create the asset must be associated with the repository. |
|||
Edit an asset (asset, tags, collections, properties, upload new version of digital asset)
You need one of these roles for the repository where the asset is managed. |
|||
Publish an asset You need at least Viewer access to the parent repository, plus one of these roles for the publishing channel that will be used to publish the asset. |
|||
Move an asset through workflow You need at least Viewer access, plus any required workflow role. |
|||
Delete an asset You need one of these roles for the repository where the asset is managed. |
|||
Download a digital asset You need one of these roles for the repository where the asset is managed. |
Audience Attributes
If you have the enterprise user role and content administrator role you can perform any task with audience attributes.
Collections
You must have the enterprise user role, at least view access to the parent repository, and one of the listed resource roles to perform the following tasks with collections.
Task | Manager | Contributor | Viewer |
---|---|---|---|
View a collection | |||
Create a collection You need one of these roles for the repository in which you create the collection. |
|||
Add an asset to collection (digital asset, content item, or document)
To add an asset to the collection, you one of these roles for the collection. To create a new asset directly in the collection, you need one of these roles for the parent repository (to create the asset), and one of these roles in the collection (to add the asset to the collection). |
|||
Remove an asset from collection Note: Removing an asset from the collection, doesn't delete the asset from the parent repository. |
|||
Edit a collection (rename, properties) | |||
Share a collection |
Components and Layouts
If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with components and layouts.
Task | Owner | Manager | Contributor | Downloader | Viewer |
---|---|---|---|---|---|
View a component or layout (component/layout and properties in the Developer area)
To use content layouts, content field editors, and content forms in asset types, users need to be able to create or edit asset types, and the content field editors and content forms must be promoted. |
|||||
Create a component or layout Any user with the standard user or enterprise user role can create components or layouts. Note: If your service administrator limited component creation to site administrators, you must be a site administrator. |
N/A | N/A | N/A | N/A | N/A |
Edit a component or layout (edit or upload component or layout files) | |||||
Copy or export a component or layout | |||||
Delete a component or layout | |||||
Share a component or layout |
Content Workflows
You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with content workflows.
Task | Manager |
---|---|
View a content workflow Any user with the enterprise user role and repository administrator role can view content workflows. |
N/A |
Register a content workflow Any user with the enterprise user role and repository administrator role can register content workflows. |
N/A |
Disable a content workflow | |
Unregister a content workflow | |
Share a content workflow |
Conversations
If you have a standard user or enterprise user role, you can create conversations. To view and participate in a conversation, you must be a member of the stand-alone conversation or have access to the resource associated with the conversation.
Editorial Roles
You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with editorial roles.
Task | Owner | Manager |
---|---|---|
View an editorial role Any user with the enterprise user role and repository administrator role can view editorial roles. |
N/A | N/A |
Create an editorial role Any user with the enterprise user role and repository administrator role can create editorial roles. |
N/A | N/A |
Edit an editorial role | ||
Copy an editorial role Any user with the enterprise user role and repository administrator role can copy editorial roles. |
N/A | N/A |
Share an editorial role | ||
Delete an editorial role |
Experiences
If you have the enterprise user role and developer application role you can perform any task with experiences.
Files and Folders
If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with files and folders.
Task | Owner | Manager | Contributor | Downloader | Viewer |
---|---|---|---|---|---|
Upload a file Any user can upload top-level files. To upload a file to a folder, you need one of these roles on the parent folder. |
|||||
Create a folder Any user can create top-level folders. To create a subfolder, you need one of these roles on the parent folder. |
|||||
View a file or folder For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
View the properties, tags, and metadata For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
View the file access history and versions For top-level files, you must be the owner. For other files, you need one of these roles on the parent folder. |
|||||
Edit the properties, tags, and metadata For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Configure public link settings for a folder | |||||
Edit custom property values | |||||
Collaborate on a file or folder (file annotations and conversation)
For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Move a file or folder For top-level files or top-level folders, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. Moves must be made to a target folder with the same owner as the source folder. |
|||||
Copy a file or folder For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. Copies must be made to a folder you own or to a folder where you have the Contributor Manager roll (write permissions). |
|||||
Rename a file or folder For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Download a file or folder For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Share members-only links to a file or folder For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Share public links to a file or folder For top-level files, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Upload a new version of a file For top-level files, you must be the owner or the owner must share a link with you giving you one of these roles. For other files, you need one of these roles on the parent folder. |
|||||
Lock a file For top-level files, you must be the owner. For other files, you need one of these roles on the parent folder. |
|||||
Delete a file or folder For top-level files and top-level folders, you must be the owner. For other files or folders, you need one of these roles on the folder itself or the parent folder. |
|||||
Manage members for a folder You need one of these roles on the folder itself or the parent folder. |
Localization Policies
If you have the enterprise user role and repository administrator role you can perform any task with localization policies.
Publishing Channels
You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with publishing channels.
Task | Owner | Manager | Viewer | Contributor |
---|---|---|---|---|
View a publishing channel | ||||
Create a publishing channel Any user with the enterprise user role and repository administrator role can create publishing channels. |
N/A | N/A | N/A | N/A |
Edit a publishing channel | ||||
Share a publishing channel | ||||
Delete a publishing channel | ||||
Publish assets |
Ranking Policies
If you have the enterprise user role and content administrator role you can perform any task with ranking policies.
Recommendations
You must have the enterprise user role and one of the listed resource roles to perform the following tasks with recommendations.
Task | Manager | Contributor | Viewer |
---|---|---|---|
View a recommendation You need one of these roles for the parent repository. |
|||
Create a recommendation You need one of these roles for the repository where the recommendation will be created. |
|||
Edit a recommendation You need one of these roles for the parent repository. |
|||
Move a recommendation through workflow You need at least Viewer access to the parent repository, plus any required workflow role. |
|||
Publish a recommendation You need at least Viewer access to the parent repository, plus one of these roles for the publishing channel that will be used to publish the recommendation. |
|||
Delete a recommendation You need one of these roles for the parent repository. |
Rendition Policies
If you have the enterprise user role and content administrator role you can perform any task with rendition policies.
Repositories
You must have the enterprise user role, repository administrator role, and one of the listed resource roles to perform the following tasks with repositories. Access to assets can be refined based on asset types and taxonomy categories using granular permissions in the parent repository.
Task | Manager | Contributor | Viewer |
---|---|---|---|
View a repository | |||
Create a repository You need one of these roles for any asset types and publishing channels you want to assign to the repository. |
|||
Edit a repository | |||
Share a repository | |||
Delete a repository |
Sites
If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with sites.
Task | Owner | Manager | Contributor | Downloader | Viewer |
---|---|---|---|---|---|
View a site
|
|||||
Create a site You need one of these roles for the template used to create the site. Note: Your service administrator can disable site creation or limit site creation to site administrators. If you don’t see the Create option on the Sites page, contact your service administrator. |
|||||
Edit a site (including change status)
Only owners and managers can rename a site. |
|||||
Copy a site | |||||
Delete a site | |||||
Share a site | |||||
Create a template from a site |
Taxonomies
You must have the enterprise user role; content administrator role or repository administrator role; and one of the listed resource roles to perform the following tasks with taxonomies.
Task | Manager | Editor |
---|---|---|
View a taxonomy | ||
Create a taxonomy Any user with the enterprise user role and content administrator role can create taxonomies. Repository administrators can't create taxonomies. |
N/A | N/A |
Import a taxonomy Any user with the enterprise user role and content administrator role can import taxonomies. Repository administrators can't import taxonomies. |
N/A | N/A |
Edit a taxonomy | ||
Promote a taxonomy | ||
Publish a taxonomy | ||
Share a taxonomy | ||
Export a taxonomy | ||
Delete a taxonomy |
Templates
If you have a standard user or enterprise user role and one of the listed resource roles, you can perform the following tasks with templates.
Task | Manager | Contributor | Downloader | Viewer |
---|---|---|---|---|
View a template | ||||
Create a template If you’re creating a template from an existing site, you need one of these roles for the existing site. Note: If your service administrator limited template creation to site administrators, you must be a site administrator. |
||||
Edit a template (edit or upload template files, rename) | ||||
Copy or export a template | ||||
Delete a template | ||||
Share a template |