Roles

The Users and Roles screens allow you to manage permissions for all screens apart from the new modules:

Channel Management
Product Management

To manage permissions for these modules, use the new Permissions Management application.

Creating access roles

To create a new role:

On the Access Roles list page, click CREATE ACCESS ROLE .
Enter a name and description for the role, and then select the required permissions below.
Click the CREATE ROLE button to save the details.

Tab	Purpose
Access	For each role, permissions are listed for each of the OpCon screens. Some screens are nested under a parent; for example, Catalogue and Workflow are nested under Content. Nested screens can be viewed using the expand icon at the end of applicable rows). The default setting for all screens is Exclude. On this tab, select the level of access for the role. Full access provides full ability to create, edit, delete, move etc. Editor permissions provide a lower level of access with limited ability to create, edit, move etc. You can configure additional settings such as delete for some screens via the Restrictions and Additional tabs. Read provides read-only access, i.e. no ability to create, edit, delete, move etc. Exclude removes access to the page completely. Inherit applies to nested screens only and means that nested screens inherit the permission level of the parent. You can configure different privileges for different items. For example, you could set Editor permissions for the Dashboard and Read for the Rails builder etc.
Restrictions	Delete permissions can be configured for the Content Catalogue screen for entities such as Editorial Content, Technical Content and Nodes. The default setting for these values is to disable delete. Additional delete settings must also be configured in the Additional tab if delete support is required; see Restrict Node Delete below.
Additional	Node Settings Restrict Node Access Restricts all node and content addition, copy and move operations at and above this level in the node hierarchy. The default setting is to allow these operations at any level. Restrict Node Delete Restricts the ability to delete nodes at and above this level in the node hierarchy. The default setting is to restrict deletion at any level. Delete support for entity types must also be enabled on the Restrictions tab for this depth-level setting to take effect.
	Bulk Copy Settings Enable Copy with Content Restricts the ability to copy nodes with associated content links. Max Content Sets the maximum number of new content links allowed to be created by a copy with content operation. The copy operation will be blocked if the requested action results in new content links above this limit.
	Addition of Content To Nodes Settings Allow addition of new content Enables or restricts the ability to add new content to a node.
Assigned Users	Displays the users assigned to the role.

Assigning users to roles

Use this to assign internal users to a role.

Display the Role in View mode, select the Assigned Users tab and click MANAGE ASSIGNED USERS .
Locate the user to be added to the role and click the Add icon. To add all the users to the role, click ADD PAGE .
Click the SAVE CHANGES button to save the details.

Use this to remove users from a role.

Display the Role in View mode, select the Assigned Users tab and click MANAGE ASSIGNED USERS .
Locate the user to be removed from the role, and click the Remove icon. To remove all the users from the role, click REMOVE ALL .
Click the SAVE CHANGES button to save the details.

You can also assign roles to users – see Users.