Security roles and permissions

In the security role settings, the permissions are organized on the following tabs:

• Features: The permissions for the modules and features.
• Records: The permissions for each item type.
• To select the Create, Comment, or Modify permissions, the View permission must be selected first.
• To select the Remove permission, the Modify permission must be selected first.
• To select or remove permissions for a group, select or clear the checkbox at the group or parent level.
Tip

Permissions are organized in the following way:

1. Group
2. Parent
3. Child



You can expand each group to see which permissions are selected.

• Fields: The field-level permissions for each item type.
• visibility (View): Users can see the field but can't edit it.
• (Modify): Users can see and edit the field.
• (No access): Users can't see the field.
• : Permissions for this group are set at the child level.
Tip
If the user doesn't have the View or Modify permission for system-required fields, they're still available:
• For drawing sets and records that use the Draft workflow status. After the item is saved in a non-draft status, the field permissions are enforced.
• In the Add Budget Item and in the Create dialogs for records such as BCM records. The field permissions are enforced in the full record.

You can create a role or copy an existing role and then edit the permissions assigned to it. You can also mark one role as the default security role so that it's assigned automatically to new users.

Example

Default role in the security role settings and the user settings

The Portfolio Administrator role can't be marked as the default role.

To create a security role

1. On the navigation toolbar, click add_circle (Create).
2. In the Information panel, enter a name and description for the role.
3. To assign this role automatically to new users, turn on the Default toggle.
4. On the Features tab, select the checkboxes to grant access to the modules and features.

Custom reports aren't selected automatically in the Reports group.

5. On the Records tab, select the permissions for each type.
6. On the Fields tab, edit the field permissions for each item type.
1. From the list, select the item type.
2. To expand a group, click the arrow.
3. To change the field permission, click the permission icon.
7. To save the changes and keep the role open, click save (Save).

—Or—

To save the changes and close the role, click arrow_back Done.

To copy a security role

1. Open the role.
2. On the navigation toolbar, click content_copy (Copy).
3. On each tab, edit the features and permissions for the new role.
4. To save the changes and keep the role open, click save (Save).

—Or—

To save the changes and close the role, click arrow_back Done.

You can only delete roles that aren't associated with any users or workflow status permissions.

To delete a security role

• In the view, on the role, click more_horiz (More) > Remove.

—Or—

Click more_horiz (More) > Delete Selected Records.