User roles permissions overview

On this page, you will find a detailed list of permissions that are assigned to user roles by default, or can be manually assigned.

If more than one requirement is listed, all must be met to execute the action.

Dashboard

Action	Viewer	Contributor	Space admin	Admin
Create space	❌	❌	❌	✓
View list of applications	✓	✓	✓	✓
View list of spaces	✓	✓	✓	✓

Space

Action	Viewer	Contributor	Space admin	Admin
Add/remove application to space	❌	❌	✓	✓
Change parent space	❌	❌	✓	✓
Create subspace	❌	Write permission required	✓	✓
Delete space	❌	❌	✓	✓
Edit space app overview	❌	❌	✓	✓
Edit space attributes	❌	“❌	✓	✓
Toggle public/private space	❌	❌	✓	✓
View applications in space	Read permission required	Read permission required	✓	✓
View space content	Read permission required	Read permission required	✓	✓
View space subspaces	Read permission for parent space required	Read permission for parent space required	✓	✓

Hierarchy

Action	Viewer	Contributor	Space admin	Admin
Change object hierarchy parent	❌	Write permission required	✓	✓
Create object hierarchy	❌	Write permission required	✓	✓
Delete object hierarchy	❌	Write permission required	✓	✓
Edit object hierarchy	❌	Write permission required	✓	✓

Release

Action	Viewer	Contributor	Space admin	Admin
Create release	❌	❌	✓	✓
Delete release	❌	❌	✓	✓
Edit release	❌	❌	✓	✓
View release	Read permission required	Read permission required	✓	✓

Object

Object detail

Action	Viewer	Contributor	Space admin	Admin
Change workflow status	❌	- Write permission required - User is assigned a role defined in the workflow transition	✓	✓
Create child object	❌	- Write permission required + Depends on the workflow state	✓	✓
Create object	❌	Write permission required	✓	✓
Delete object	❌	Write permission required	✓	✓
Edit object attributes	❌	- Write permission required + Depends on the workflow state	✓	✓
Edit object attributes with user role	❌	- Write permission required - User has ownership assigned (e.g. business owner, steward) + Depends on the workflow state	✓	✓
Embedded text from current space - add	❌	Write permission required	✓	✓
Embedded text from current space - view	Read permission required	Read permission required	✓	✓
Embedded text from other space - add	❌	Write permission for current space required AND read permission for other space required	Read permission for other space required	✓
Embedded text from other space - view	Read permission for current space required	Read permission for current space required	✓	✓
Rename object	❌	Write permission required	✓	✓
Restore deleted object	❌	❌	❌	❌
Restore previous object version	❌	❌	❌	❌
Share object	❌	Read permission required	✓	✓
Switch to the previous object version	Read permission required	Read permission required	✓	✓
Toggle favourite object	Read permission required	Read permission required	✓	✓
Toggle watched object	Read permission required	Read permission required	✓	✓
View deleted object	❌	❌	❌	❌
View object	Read permission required	Read permission required	✓	✓
View object changes	Read permission required	Read permission required	✓	✓

Object attachment

Action	Viewer	Contributor	Space admin	Admin
Add attachment	❌	Write permission required	✓	✓
Delete attachment	❌	Write permission required	✓	✓
Download attachment (all versions)	Read permission required	Read permission required	✓	✓
View attachments (all versions)	Read permission required	Read permission required	✓	✓

Object attachment based on workflow state

Permission to make changes to attachments can be linked directly to the workflow state, regardless of the user’s permission to edit the object. For example, a contributor with write permission can add attachments only when the object is in Edit workflow state.

Specify who can make changes to attachments in a specified workflow state by defining the attachmentUserRelationTypeKeys property in workflow states.

attachmentUserRelationTypeKeysvalue	Permission to make changes to attachments
Property not defined	Any user (for non-admins: write permission required + role must be defined for the workflow)
"core_steward"	Only admins and space admins
"user_role"	Admins, space admins, and specified user roles (write permission required for non-admins + role must be defined for the workflow)

Object relations

Action	Viewer	Contributor	Space admin	Admin
Add object relations (from current space to current space)	❌	Write permission required	✓	✓
Add object relations (from current space to other space)	❌	Write permission for current space required AND read permission for other space required	✓	✓
Remove object relations	❌	Write permission required	✓	✓
View object relations (from current space to current space)	Read permission required	Read permission required	✓	✓
View object relations (from current space to other space)	Read permission for current space required	Read permission for current space required	✓	✓

Object comments

Action	Viewer	Contributor	Space admin	Admin
Add object comment	Read permission required	Read permission required	✓	✓
Add thumbs up and down	- Read permission required	Read permission required	✓	✓
Change workflow status	❌	- Write permission required - User is assigned a role defined in the workflow transition	✓	✓
Edit object comment	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	Entity is created by the user	Entity is created by the user
Remove object comment	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓
Remove thumbs up and down	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	Entity is created by the user	Entity is created by the user
View object comments	Read permission required	Read permission required	✓	✓

Object concept

Object concept detail

Action	Viewer	Contributor	Space admin	Admin
Apply concept to original object	❌	- Write permission required - Entity is created by the user	✓	✓
Create concept	❌	- Read permission required	✓	✓
Delete concept	❌	- Read permission required - Entity is created by the user	✓	✓
Edit concept	❌	- Read permission required	✓	✓
Remove user from sharing	❌	- Read permission required - Entity is created by the user	❌	- Read permission required - Entity is created by the user
Share concept	❌	- Read permission required - Entity is created by the user	✓	✓
View concept	- Read permission required - Entity is created by or shared with the user	- Read permission required - Entity is created by or shared with the user	✓	✓

Object concept attachments

Action	Viewer	Contributor	Space admin	Admin
Add attachment	❌	- Read permission required - Entity is created by the user	✓	✓
Delete attachment	❌	- Read permission required - Entity is created by the user	✓	✓
Download attachment (all versions)	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓
View attachments (all versions)	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓

Object concept relations

Action	Viewer	Contributor	Space admin	Admin
Add object relations (from current space to current space)	❌	- Read permission required - Entity is created by the user	✓	✓
Add object relations (from current space to other space)	❌	- Read permission required - Entity is created by the user	✓	✓
Remove object relations	❌	- Read permission required - Entity is created by the user	✓	✓
View object relations (from current space to current space)	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓
View object relations (from current space to other space)	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓

Object concept comments

Action	Viewer	Contributor	Space admin	Admin
Add object comment	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓
Add thumbs up and down	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓
Edit object comment	- Read permission required - Entity is created by the user - Entity is shared with the user	- Read permission required - Entity is created by the user - Entity is shared with the user	✓	✓
Remove object comment	- Read permission required - Entity is created by the user - Entity is shared with the user	- Read permission required - Entity is created by the user - Entity is shared with the user	✓	✓
Remove thumbs up and down	- Read permission required - Entity is created by the user - Entity is shared with the user	- Read permission required - Entity is created by the user - Entity is shared with the user	Entity is created by the user	Entity is created by the user
View object comments	- Read permission required - Entity is created by the user	- Read permission required - Entity is created by the user	✓	✓

Bulk edit

Action	Viewer	Contributor	Space admin	Admin
Add object icon	❌	Write permission required	✓	✓
Bulk delete objects	❌	Write permission required	✓	✓
Bulk edit attribute	❌	Write permission required	✓	✓
Bulk edit relation	❌	Write permission required	✓	✓

Import and export

Action	Viewer	Contributor	Space admin	Admin
Import	❌	✓	✓	✓
Export	✓	✓	✓	✓

Numbering

Action	Viewer	Contributor	Space admin	Admin
Numbering level setting	❌	Write permission required	✓	✓
Numbering on/off	❌	❌	✓	✓