Permissions by Resource Type

The Permissions table lists the various permissions that you can set.

Permissions
Resource Type / Object Permission name Description Default
Event / Event

Note: Permissions for this object apply for all instances of the object.

Full Control Allows you permission to work on the selected resource. Denied
Cancel event Allows you to cancel an event/workflow. Allowed
Allow record workflow initiation using web services Allows you to initiate a workflow using web services. Allowed
Allow process records web service Allows you to process records using the web service Denied
Allow roll back and edit of event Allows you to roll back a selected event or selected step. Denied
Restart paused event Allows you to roll back to a selected step and restart the workflow from that step. Denied
Resubmit event Allows you to resubmit an error or canceled event directly from the Event Log. Allowed
Synchronization Profile / Synchronization Profile Browse Records Allows you to browse records from a synchronization event. Allowed
  Create Allows you to create a synchronization profile. Allowed
  Copy Allows you to copy a synchronization profile. Allowed
  Delete Allows you to delete a synchronization profile. Allowed
  List Allows you to specify whether the synchronization profile should be listed or not. Allowed
  Modify Allows you to modify a synchronization profile. Allowed
  Synchronize Records Allows you to synchronize a record. Allowed
  Show History Allows you to show the history of a synchronization profile. Allowed
  Show Usage Allows you to show the usage of a synchronization profile. Allowed
  View Allows you to view the details of a synchronization profile. Allowed
  Validate For Synchronization Allows you to validate a synchronization profile. Allowed
Work item

Note: Permissions for this object apply for all instances of the object.

Full control for work items assigned to other users Allows you to give full control for work items owned by other users. Denied
Lock work items assigned to other users Allows you to lock work items for others. Denied
View, reassign and close work items assigned to other users Allows you to view, close, or reassign work items for others. This also implies that, you must have permissions to view, reassign, or close the work items of other users. Denied
Unlock work items locked by other users Allows you to unlock work items of other users. Denied
Repository / Attribute group Modify Attribute Data Allows you to modify attribute data from the selected attribute group. Allowed
View Attribute Data Allows you to view attribute data from the selected attribute group. Allowed
Repository/ Classification Scheme Full Control Allows you to give full control for classification schemes owned by other users. Allowed
  Browse Records by Classification Allows you to browse classification schemes in a repository. Allowed
  Create Private Classification Allows you to create a private classification scheme. Allowed
Repository / Repository Browse Records Allows you to browse records in a repository. Allowed
  Create Allows you to create a repository. Allowed
  Copy Allows you to copy a repository. Allowed
  Delete Allows you to delete a repository. Allowed
  Export Records Allows you to export data from a repository. Denied
  Import Records Allows you to import records into a repository. Allowed
  Input Mapping Allows you to manage the input maps of a repository ( View, Import,Delete, Copy, and Show Usage ). Allowed
  List Allows you to view the list of repositories. Allowed
  Modify Allows you to modify a repository. Allowed
  Named version management Allows you to create and manage named versions of a repository. Allowed
  Rulebase Management Allows you to create and manage validation rules. Allowed
  Show Usage Allows you to show the usage of a repository. Allowed
  Text Search Allows you to search for text in a repository. Allowed
  View Allows you to view details of a repository. Allowed
Repository / Record Create Allows you to create a record. Allowed
  Compare Allows you to compare records. Allowed
  Copy Allows you to make a copy of an existing record. Allowed
Correct Allows you to update the existing version of a record instead of creating a new version. Denied
  Delete Allows you to delete a record. Allowed
  Edit when record is in workflow Allows you to edit a record even if it is in a workflow. Denied
  Modify Allows you to modify a record. Allowed
Manual Merge Allows you to merge records from the Browse and Search and Text Search pages.
Note: You can merge records only if you have permission to modify a record.
Allowed
  Override integration hub action Allows you to override an action suggested by integration hub. Allowed
  Save with errors Allows you to save even when there are errors. Denied
  Show History Allows you to show the history. Allowed
  Allow confirmation of record without workflow Allows you to confirm a record without sending it through a workflow (add, modify, or delete).

For a web service, when the permission is denied and the record state is confirmed, the request results in an error response with the message "User is not authorized to save records without workflow processing".

Denied
  Allow action - Send message Allows you to send message for a record. Allowed
  Allow record saved as unconfirmed without workflow Allows you to add or modify a record and save it as unconfirmed without sending it through workflow. Allowed
  Allow action - Send response Allows you to send response for a record. Denied
  View Allows you to view records. Allowed
  Update synchronization status (GDSN only) Allows you to update synchronization status of a single record. Denied
Repository / Relationship Add new related record Allows you to add relationships. The permission can be applied to a specific relationship.

When this permission is denied, the Create Related Record option is not displayed.

For web services, if the user tries to add a related record, error response will be returned.

Allowed
  Remove relationships Allows you to delete relationships. The permission can be applied to a specific relationship.

When this permission is denied, the Remove Relationship option is not displayed.

For web services, if the user tries to remove relationship, error response will be returned.

Allowed
  Modify relationship attributes Allows you to add and modify the relationship attribute values of two related records. When this permission is denied, user will not be able to modify the values of relationship attributes.

For web services, if the user tries to update the relationship attribute data, an error is returned in the response.

Allowed
  Search records to add relationships Allows you to search records to add related records.

When this permission is denied, the Add Relationship option to add a related record is not displayed.

For web services, if the user tries to search a record to add as a relationship, error response will be returned.

Allowed
  View relationships and related records Allows you to view relationships. The permission can be applied to a specific relationship.

If this permission is denied, the relationship is not displayed.

For web services, when the record is queried, the relationship and the related record are not a part of the response returned.

Allowed
Repository / Subset Rule Browse Records Allows you to browse records from a subset. Allowed
  Create Allows you to create a subset rule. Allowed
  Copy Allows you to copy a subset rule. Allowed
  Delete Allows you to delete a subset rule. Allowed
  Export records Allows you to export records based on a subset rule. Denied
  List Allows you to view a list of subset rules. Allowed
  Modify Allows you to modify a subset rule. Allowed
  Show Usage Allows you to show the usage of a subset rule. Allowed
Repository/ Perspective Full Control Allows you to give full control for perspective owned by other users. Allowed
  Browse Records by Perspective Allows you to browse perspectives in a repository. Allowed
Hierarchy/ Hierarchy Full Control Allows you to work on the selected hierarchy. Denied
Delete Allows you to delete the hierarchy. Allowed
Edit Record Links Allows you to edit records that are linked to the hierarchy. Denied
Release Lock Allows you to release a hierarchy that is locked by another user. Denied
Export Allows you to export the hierarchy. Denied
List Allows you to view the list of hierarchies. Allowed
Modify Allows you to modify an existing hierarchy. Allowed
Allow save/delete Hierarchy without workflow Allows you to save or delete the hierarchy even if it is not in a workflow, that is, you can save or delete the hierarchy immediately as confirmed. Denied
View Allows you to view the details of a hierarchy. Allowed
View Record Links Allows you to link records to the hierarchy. Denied