Add an Object Role
You may add any number of new object roles on an object (repository model) and to one or more users or groups.
Capabilities which are assigned through object roles are always granted to the entire repository model. Permissions based upon capabilities assigned are NOT checked (and thus cannot vary) at the individual contained (within the repository model) object level, thus assigning such a role at the contained object level will not change anything.
There is one special use case for roles with workflow capabilities, because they are checked at the contained object level and also appear to grant some permissions (e.g., if you are a workflow editor and the object is in the right workflow status, then you can edit, otherwise you cannot). But these are not authorization permissions, they are just allowed actions in the workflow process.
Steps
- Sign in as a user with at least theSecurity Administratorcapability global role assignment.
- Go to MANAGE > Object Roles in the banner
- Click Add.
- Provide Name and Definition.
- Use the Capabilities pick list to select capability assignments for the role.
- Click OK.
You may create a new role based upon an existing one by using the Duplicate Role context menu item on the existing line.
Example
Sign in as Administrator and go to MANAGE > Object Roles.
Right click on the Content Custodian role and select Duplicate Role.
Enter “Finance Content Custodian” for the Name and “Users who act as content custodians for the Finance systems” in Definition.
No need to pick any additional capabilities and we are only creating this role to assign to the Finance system folder in the Repository.
Click OK.
The License is of type Producer. This is assigned automatically. If a role has any capability type Producer, then it is of type Producer, otherwise if all capabilities for that role are Consumer only, then it is of type Consumer.