Configuring Roles

Roles are sets of permissions that can be assigned to users or groups. The permissions enable users or groups to perform specific functions within Spectrum.

Note: Spectrum includes several pre-configured roles that you can use to grant access to users and groups. You can use these roles as they are, or create custom roles to suit your specific needs. For more information, see Built-in Users and Roles.

You can create roles to match the various business and job functions of your users. To create roles, you assign permissions appropriate for the job function. You then assign users and groups to the roles you define. In this way, permissions are not assigned directly to users. This can simplify user and folder management.

Object Access Permission

The default permissions of a role determines which actions can be performed on the role itself.

Exceptions

You can also set exceptions to the default permissions. An exception can be used to specify a certain user or group that needs different access to a role than most other users. For example, you could allow all users to read a role, but only certain users to delete it.

Role-Based Permissions

A permission in Spectrum is an action that is can be performed on an object An item in Spectrum such as a role, group, user, business rule, application, workflow template, data service, form, image, integration, job, label template, layer object, layout, field data catalog, device, device group, process, reusable object, facility, Remote Site, Spectrum Application Server, or server process. (entity). Permissions vary depending on the object. To define a role, you select a set of permissions that can be performed on an object.

Objects (Entities)

An object in Spectrum is an item on which you can perform an action. To define a role, you select objects and then grant or deny permissions to those objects.

Best Practices

Configure permissions for roles, assign roles to groups, and add users to the group. For more information, see Create or Modify a Role.

Note: Although a user inherits the roles of a group in which the user has membership, those roles are displayed only on the Roles dialog box The role(s) assigned to the user or group. To display, in the ribbon click Home > Role. For a user, roles inherited from a group membership are not displayed. for the group, not on the Roles dialog box for the user or the Users dialog box The user(s) assigned to the group or role. To display, in the ribbon click Home > User. for the role.