Roles, along with asset groups, are the primary mechanism for securing assets in your Acquia DAM. All users are assigned to one or more roles, and all assets are assigned to one or more asset groups. When you first create asset groups and roles, you'll assign users to roles and assets to asset groups. Users in roles share common permissions, which control how a role can engage with assets in the asset group, allowing users to view assets, download and upload them, edit metadata, and more.
When you enable features on the Features page, some features will have permissions that must be enabled at the role level. You'll receive notification of that when you're enabling those features.
Users can be assigned to multiple roles. If you've assigned someone to more than one role, they will be able to see assets in search results if at least one of the roles they're assigned to has permission to view assets in the asset group. Permissions are cumulative.
Create new roles¶
As people move through different roles at your company, new job positions emerge, or new departments are created, you can create new roles to allow users access only to the assets they need by creating roles. To create a role:
-
Go to the Admin app.
-
Click Roles under Permission Settings in the left navigation.
-
Click Create new role.
-
Indicate a role name and, if applicable, a description. Check if you want users to be removed from the role by an expiration date and select the role template, which allows certain permissions to be automatically enabled for the role. The general user role will be selected by default. (Note that role templates can be selected only when you're creating new roles.)
-
On the Available Applications page, choose the apps the role can access and customize app permissions for the selected roles.
-
On the Available Asset Groups page, choose the asset groups the role can access. Create an asset group if the asset group you want to assign the role to isn't listed.
-
On the Available Upload Profiles page, choose the upload profiles the role can upload to. Create an upload profile if the upload profile you want to assign the role to isn't listed.
-
On the Available Order Profile options page, choose the order profile options, the asset limit per order, and the asset limit per user for the role.
-
On the Available Order Options page, choose the conversion formats and delivery methods the role can use. Create a conversion format or delivery method if the conversion format or delivery method you want to assign the role to isn't listed.
-
On the Registration Codes page, choose the registration code that will assign users to the role. Create a registration code if the one you want isn't listed.
-
Click Finish & Review.
Duplicate roles¶
If you'd like other roles you create to have the same or similar base permissions as an existing role, we recommend duplicating the existing role. From there, it's easy to make adjustments to the permissions. When you create duplicates of existing roles, current user and app permissions and registration codes are applied. This simplifies the process of creating new roles since existing permissions and access are similar.
To duplicate a role:
-
Go to the Admin app.
-
Click Roles under Permission Settings in the left navigation.
-
Click Duplicate for the role you want to copy. A copy of the role name followed by "copy" displays below the existing role.
-
Click View, Edit, or Edit Permissions to see information about the role that has been applied, to edit the role name or description, and to edit permissions for the role.
View current roles¶
When you're interested in learning about current permissions for an existing role, click View on the Roles page to see those permissions and make changes to them.
Edit roles¶
If you need to update role names or descriptions, or if you need to remove users from a role by an expiration date, or if the role should automatically inherit new permissions, you'll want to edit the role. To do that:
- Go to the Admin app.
- Click Roles under Permission Settings in the left navigation.
- Click Edit.
- Edit the name and/or description, then check if users should be removed from the role by an expiration date or if they should automatically inherit new permissions assigned to the role.
- Click Update when you're done or Update and Edit Permissions to update permissions for the role.
Edit permissions for roles¶
From time to time, you may need to update or remove permissions that apply to a role. To edit permissions for an existing role:
- Go to the Admin app.
- Click Roles under Permission Settings in the left navigations.
- Click Edit Permissions for the role you'd like to update, then choose the appropriate tab to update the permissions.
- Click Return to Roles.
Learn more about roles in the Permission Settings video in Acquia Academy.