A.4.1 Roles

A Role consists of one or more actions (functions/permissions). A Group can have single or multiple roles. For example, Admin, user, and guest.

RoleCode RoleName Description
WKSPACC Workspace Access WorkspaceAccess Role
WKSPAUTH Workspace Authorize Workspace Authorize Role
WKSPREAD Workspace Read WorkspaceRead Role
WKSPWRITE Workspace Write WorkspaceWrite Role
FLDRACC FolderAccess FolderAccess Role
FLDRAUTH FolderAuthorize FolderAuthorize Role
FLDRREAD FolderRead FolderRead Role
FLDRWRITE FolderWrite FolderWrite Role
IDMGMTACC IdentityMGMT access Systemadmin access
IDMGMTADVN IdentityMGMT advanced Identitymanagement advanced
IDMGMTAUTH IdentityMGMT authorize Identitymanagement authorize
IDMGMTREAD IdentityMGMT read Identitymanagement read
IDMGMTWRIT IdentityMGMT write Identitymanagement write
FUNC_READ FunctionRead Role -
FUNC_WRITE FunctionWrite Role -
FUNC_ADV FunctionAdvanced Role -
ROLE_READ RoleRead Role -
ROLE_WRITE RoleWrite Role -
ROLE_ADV RoleAdvanced Role -
ROLE_AUTH RoleAuthorize Role -
GRP_READ GroupRead Role -
GRP_WRITE GroupWrite Role -
GRP_ADV GroupAdvanced Role -
GRP_AUTH GroupAuthorize Role -
USR_READ UserRead Role -
USR_WRITE UserWrite Role -
USR_ADV UserAdvanced Role -
USR_AUTH UserAuthorize Role -
SRVC_READ ServiceRead Role -
APP_READ ApplicationRead Role -
WRKSP_READ WorkspaceRead Role -
WRKSP_WRITE WorkspaceWrite Role -
WRKSP_ADV WorkspaceAdvanced Role -
FLDR_READ FolderRead Role -
FLDR_WRITE FolderWrite Role -
FLDR_ADV FolderAdvanced Role -
DTSRC_READ DataStoreRead Role -
ADMIN_LINK AdminLink Role -
BATCH_READ BatchRead Role Batchread role in scheduler service
BATCH_WRITE BatchWrite Role Batchwrite role in scheduler service
BATCH_ADV BatchAdvance Role Batchadvance role in scheduler service
BATCH_AUTH BatchAuthorization Role Batchauthorize role in scheduler service
BATCH_OPER BathOperation Role Batchoperation role in scheduler service
BATCH_MAINT BatchMaintenance Role Batchmaintenance role in scheduler service
MDLACCESS ModelAccess UserGroup mapped will have access to Model Link and Summary
MDLREAD Model Read Model Read
MDLWRITE ModelWrite ModelWrite
MDLPHANTOM ModelPhantom ModelPhantom
MDLAUTH ModelAuthorize ModelAuthorize
MDLADV ModelAdvanced ModelAdvanced
MDLREVIEW ModelReview ModelReview
MDLDEPLOY ModelDeployment ModelDeployment
MDLADMIN ModelAdmin ModelAdmin
DSREAD DataStoreRead DataStoreRead
DSWRITE DataStoreWrite DataStoreWrite
DSACCESS DataStoreAccess DataStoreAccess
DSADMIN DSADMIN ComplianceStudio Admin Role
DSBATCH DSBATCH Batch Role
DSINTER DSINTER ComplianceStudio Interpreter Configuration Role
DSUSER DSUSER ComplianceStudio User Role
DSAPPROVER DSAPPROVER ManualEdges Approver role
DSREDACT DSREDACT Redactionrole for Graph
MDLEXE ModelExecute ModelExecute
MDAPPROVER MDAPPROVER Approver
MDREQUESTER MDREQUESTER Requester