...
The following are the roles that are available by default in ES:
- Internal/publisher - users in this role will be allowed to create new assets (i.e., an asset author would belong to this role).
- Internal/reviewer - users in this role are considered as the store reviewers. Every asset needs to be reviewed by a user in this role, before the asset is published into the ES Front.
- private_{username} - users’ private role. Every user in the ES are automatically associated with a role that is created by prefixing their username with
private_. This role is used to control per user permissions.
Permissions associated with user roles
| User role | Allows Actions | |
|---|---|---|
| Internal/publisher |
| |
| Internal/reviewer | Approve or reject assets that are in the in-review state. | |
| private_{username} | By default, no permissions are assigned to this role; however, if there are permissions that need to be allowed to specific users, they can be assigned using this user role together with that specific user's username. | |
| Internal/everyone |
| All permissions will be revoked by default. |
| Info |
|---|
The Add, Modify and Remove role options are only visible to administrators with privileges. |
...
To create an internal role:
- Log in to the Enterprise Store management console using the following URL: https://localhost:9443/admin/carbon/admin/
- On the Configure menu, click Users and Roles.
- Click Roles. The Roles page appears.
- Click Add New Internal Role.
- Enter a name for the role.
- Click Next to proceed to the next step. You can also click Finish, in which case, the new roles will be created with default permissions (none) and no assigned users.
- Select the respective permissions that need to be assigned to the role and click Next .
- Enter a username pattern and click Search.
- Enter the exact username.
- Enter part of the username followed by or preceded by an asterisk (*) (for example, ad* - this option will return all the users that have usernames starting with "ad".)
- Enter only an asterisk *. This option will return all the users that have not been assigned to this role.
- Select the respective users that need to be assigned to this role.
You can also click Finish. In this case, the new roles will be created with no assigned users. - Click Finish.
...