Security Roles And Privileges
The following tables describe role functions and privileges in Portal.
Role Description
The following tables describe tenancy and project roles in Portal. Project privileges are assigned based on the tenant role and the role inside a project.
Role | Description |
---|---|
Tenant User |
Invited and registered at the tenant level. Can be assigned to a project after registration. |
Project Admin | Creates projects. Has the Project Owner role in the created projects. |
Tenant Admin | Has the Project Admin rights and access to the Tenant Account settings to manage users and configure and maintain the tenancy. |
Role | Description |
---|---|
Reviewer |
Reviews documents inside assigned projects. |
Approver | Has reviewer rights and approves documents inside assigned projects. |
Contributor | Has Approver rights, modifies and commits documents inside assigned projects. |
Document Controller |
Has Contributor rights, manages project membership, organizes internal projects, allocates data, and manages review process. |
Project Owner |
Has Document Controller rights. |
Contractor | External contributor. Modifies and submits documents inside assigned projects. |
Role Privileges
The following table lists the privileges that are granted by each role for various Portal items. Scroll the table to see additional privileges. A user's effective privileges in a given project are the combination of their tenancy role and their project role.
The tenancy roles and privileges apply throughout the tenancy regardless of the current project. The project roles and privileges apply only to the user's current project.
Category |
Tenancy Role |
Project Role |
||||||||
---|---|---|---|---|---|---|---|---|---|---|
Item |
Privilege |
Tenant |
Project |
Tenant |
Project |
Document |
Contractor |
Contributor |
Approver |
Reviewer |
Package | Close packages |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | Create packages |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | Download all documents in a package as a ZIP |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Package | Download documents from packages |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Package | Remove documents from own package |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | Reopen a closed package |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | Send packages |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | Upload documents to packages |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | View all packages in projects |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | View closed packages in project |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Package | View documents in packages |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Package | View own packages only |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Package | View package details |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Project | Add members to projects |
Permitted |
Permitted |
Permitted |
||||||
Project | Configure project |
Permitted |
Permitted |
Permitted |
||||||
Project | Create projects |
Permitted |
Permitted |
|||||||
Project | Delete invitations for members to projects |
Permitted |
Permitted |
Permitted |
||||||
Project | Delete projects |
Permitted |
Permitted |
|||||||
Project | Export project audit trail |
Permitted |
Permitted |
Permitted |
||||||
Project | Invite members to projects |
Permitted |
Permitted |
Permitted |
||||||
Project | Remove members from projects |
Permitted |
Permitted |
Permitted |
||||||
Project | Resend project member invitation |
Permitted |
Permitted |
Permitted |
||||||
Project | Update project role for user |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Project |
View all projects in a account |
Permitted |
||||||||
Project | View audit trail |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
||||
Project | View audit trail of project members |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
||||
Project | View list of pending invitations |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
||||
Project | View list of project members |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
||||
Project | View privileges of project members |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
||||
Project | View roles of project members |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
||||
Project Repository | Access project repository as an external user |
Permitted |
||||||||
Project Repository | Access project repository as an internal user |
Permitted |
Permitted |
Permitted |
||||||
Project Repository | Acknowledge returned package |
Permitted |
||||||||
Project Repository | Acknowledge submitted package |
Permitted |
Permitted |
|||||||
Project Repository | Assign document |
Permitted |
Permitted |
|||||||
Project Repository | Can accept or reject documents |
Permitted |
Permitted |
|||||||
Project Repository | Can approve or disapprove documents |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Project Repository |
Can cancel approval package |
Permitted |
Permitted |
|
|
|
|
|||
Project Repository | Can release documents |
Permitted |
Permitted |
|||||||
Project Repository | Can send document for approval |
Permitted |
Permitted |
|||||||
Project Repository | Can send documents for handover |
Permitted |
Permitted |
|||||||
Project Repository | Can view documents for approval |
Permitted |
Permitted |
Permitted |
Permitted |
|||||
Project Repository | Create review package |
Permitted |
Permitted |
|||||||
Project Repository | Delete draft documents for external users |
Permitted |
||||||||
Project Repository | Delete draft documents for internal users |
Permitted |
Permitted |
Permitted |
||||||
Project Repository | Edit meta data for external users |
Permitted |
||||||||
Project Repository | Edit meta data for internal users |
Permitted |
Permitted |
Permitted |
||||||
Project Repository | Return package to contractor |
Permitted |
Permitted |
|||||||
Project Repository | Submit package to document control |
Permitted |
||||||||
Project Repository | View packages submitted for review |
Permitted |
Permitted |
|||||||
Project Repository | View released documents |
Permitted |
Permitted |
Permitted¹ |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Create quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Delete quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Download all documents in a quick share as a ZIP |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Download documents from quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Forward quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Remove documents from own quick share |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Share quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | Upload documents to quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | User is not visible and cannot send quick shares to other restricted users |
Permitted |
||||||||
Quick Share | View details of quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | View documents in quick shares |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Quick Share | View quick shares created by me or shared with me |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Review Packages | Change the review team |
Permitted |
Permitted |
|||||||
Review Packages | Participate in reviews and see all reviews |
Permitted |
Permitted |
|||||||
Review Packages | Participate in reviews and see own reviews only |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
Permitted |
|||
Account |
Add account role to user |
Permitted |
||||||||
Account |
Disable / enable user |
Permitted |
||||||||
Account | Edit authentication settings |
Permitted |
||||||||
Account | Edit Enterprise Server configuration |
Permitted |
||||||||
Account | Edit issue reasons |
Permitted |
||||||||
Account | Edit user profile |
Permitted |
||||||||
Account |
Remove account role from user |
Permitted |
||||||||
Account |
Update account role for user |
Permitted |
||||||||
Account | View and edit account document properties |
Permitted |
||||||||
Account | View and edit account document types |
Permitted |
||||||||
Account |
View audit trail of tenant users |
Permitted |
||||||||
Account |
View audit trail on account level |
Permitted |
||||||||
Account | View Enterprise Server configuration |
Permitted |
||||||||
Account |
View list of tenant users |
Permitted |
||||||||
Account |
View privileges of users |
Permitted |
||||||||
Account | View roles of users |
Permitted |
||||||||
Account | View usage of the account |
Permitted |
||||||||
User |
Edit own user preferences |
Permitted |
Permitted |
Permitted |
||||||
User |
Edit own user profile |
Permitted |
Permitted |
Permitted |
¹By default, external users (those assigned to the Contractor role) do not have access to see released documents. To give access to Contractors, configure this option in Access Control on Released Documents.