System Roles

enaio® 10.10

The following system roles can be assigned to individual users in enaio® administrator:

ID	System role	Description
66	DMS: Set up local security groups	Configure remote areas
18	DMS: Supervisor	All system roles except for those for workflow functions, enaio® enterprise-manager, and 'Server: Switch job context'
1	Administrator: Start	Start enaio® administrator
2	Administrator: Configure entire system	Configure the entire system (LDAP, automatic actions, etc.)
4	Administrator: Configure security system	Configure the security system (user and rights management)
65	Administrator: Configure local security groups	Restricted configuration of the security system for remote areas.
5	Administrator: Configure W-templates	Manage W-templates (configuration of W-templates and assigned applications) The system role 'Administrator: Configuration security system' is also required.
6	Administrator: Configure archive print	Set up archive print
8	Administrator: Start automatic actions	Start installed automatic actions
9	Administrator: Configure automatic actions	Set up and configure automatic actions
10	Administrator: View user trays	View the private filing trays of all users in enaio® administrator
50	Administrator: Edit object rights	Specify other users as owners or adopt ownership of object
11	Editor: Start	Start enaio® editor
12	Editor: Edit object definition	Change and modify object definition This role by itself does not enable you to save changes in the database.
13	Editor: Customize database	Make changes to the database
96	Editor: Define visibilities	Set up specialist administrators with access to individual cabinets
14	Start: Start	Start enaio® start in order to execute automatic actions
15	Capture: Start	Start enaio® capture
87	Capture: Edit filing tray	Access to the filing tray in enaio® capture
16	Capture: Configure	Set up configurations for enaio® capture
36	Client: Start	Start enaio® client
70	WebClient: Start	Starting enaio® webclient
101	Webclient: Open location	Opens a location in enaio® webclient
17	Client: Save personal settings	Configure individual user settings and save searches and/or documents to the object search of clients
80	Client: Configure external applications	Integrate external applications into clients
77	Client: Customize ribbon	Customize the ribbon
28	Client: Open history	View editing history, if this is enabled
32	Client: Recover data from history	Restore earlier data via the editing history (condition: 'Client: Open history' system role is available)
56	Client: Configure history for individual object	Allows the history to be configured for a single document, provided that this option is available in the object definition (condition: 'Client: Open history' system role is available)
29	Client: Start expert mode	Advanced search for objects
97	Client: Export index data	Export index data from lists using the Export function
30	Client: Export document contents	Export document files from lists using the Export function It is always possible to export documents that have been edited in external applications this way.
74	Client: Print documents	Print document via clients It is always possible to print documents that have been edited in external applications this way.
94	Client: Scan documents	Scan documents via clients
99	Client: Open links	Open links
100	Client: Edit links	Edit links
71	Client: Open notes	Show notes on and links to objects
31	Client: Edit notes	Edit and delete notes on and links to objects
33	Client: Show personal recycle bin	Show the personal recycle bin from which deleted data can be restored
37	Client: Show system recycle bin	Show system recycling bin in which the deleted objects of all users are displayed (condition: 'Client: Show personal recycle bin' system role is available)
40	Client: Delete objects from recycle bin	Permanently delete objects in the recycle bin (condition: 'Client: Show personal recycle bin' system role is available)
34	Client: Run SQL queries	Run SQL queries
85	Client: Share documents	Share documents with users with limited access rights
86	Client: Manage sharing options	Remove shares of other users
35	Client: Send content as e-mail	Send objects to a recipient as content via e-mail and place into the clipboard
44	Client: Open properties	Show property dialog for an object
63	Client: Move objects	Move objects, if permitted in enaio® administrator
83	Client: Assign further locations	Assign another location to documents, if permitted in enaio® administrator
84	Client: Create reference documents	Create reference documents from documents
79	Client: Move across cabinets	Move documents across cabinets
19	Client: Use workflow	Use workflows
90	Client: Show workflow substitutions	See for whom the user is a substitute.
61	Client: Workflow substitute configuration	Set up workflow substitutes for yourself
62	Client: Workflow process administration	Restricted management of running processes from clients The administration of running processes is also permitted via system role 20: Cancel process, cancel process step, clear personalization, assign process step.
67	Client: Edit workflow circulation slip	Edit workflow circulation slip
68	Client: Manage private circulation slip templates for workflows	Manage and delete templates for private circulation slips
69	Client: Manage public circulation slip templates for workflows	Manage and delete templates of public circulation slips
51	Client: Use object search	Show 'Object Search' area
52	Client: Use navigation	Show 'Navigation' area
78	Client: Run default search	If users should run searches exclusively via saved searches, the standard search (search by index data and full-text search) can be switched off.
95	Client: Show number of objects in register tree	The folder type option 'Determine number of objects in register tree' is not available to users. The rights system is ignored when determining the number of objects. For that reason, this data is imprecise in enaio® client.
59	Client: Add icon	Include icons in the system's data pool
60	Client: Delete icon	Remove icons from the system's data pool
64	Client: Edit static layers of other users	Edit static layers you did not create yourself
93	Client: Manage public desktop	Manage the public desktop for all users
38	Client: Edit SQL queries	Create and edit SQL queries
92	Client: Subscriptions for others	Allows users to create subscriptions for other users
39	Client: Manage subscriptions	Manage and delete subscription of all users
91	Client: Follow-ups for others	Allows users to create follow-ups for other users
55	Client: Manage follow-ups	Manage and delete follow-ups of all users
98	Client: Undo the checkout for others	Undo the checkout of documents of other users. The 'Write object' right for the document type is also required.
45	Client: Debug events	Run events for the client in debug mode
49	Client: Create events	Edit events for client and server
75	Client: Change archiving status	Give documents the property 'archivable' or 'non-archivable'
53	Client: Delete archived documents	Delete documents with the 'archived' status
57	Client: Execute changes in batch mode	Carry out collective editing for several selected objects in a hit list
73	Client: Always show variant administration	Users who have no write permissions for index data or objects can open variant administration in read-only mode, but are not allowed to create new variants or assign the 'active variant' status to other variants
76	Client: Show favorites	Favorites are managed and displayed for each user.
81	Client: View preview annotations	Show annotations in the PDF preview
82	Client: Edit preview annotations	Create, edit, and delete annotations in the PDF preview
20	WF-Admin: Start	Starting enaio® administrator-for-workflow In addition, functions are permitted in the client: Cancel process, cancel process step, clear personalization, assign process step (see system role 62).
21	WF-Editor: Start	Start enaio® editor-for-workflow
22	WF-Editor: Edit organization	Edit workflow organization
58	WF-Editor: Report presence/absence of users	Set presence of other workflow users
23	WF-Editor: Create model	Create workflow model
24	WF-Processes: Start via import	Start workflow processes via a system import which is run via the automatic action 'Data/document import'
25	WF-Simulation: Start	Start a workflow simulation
26	WF-Script: Start	Start runtime environment for workflow scripts
27	Enterprise-Manager: Start	Start enaio® enterprise-manager
72	Server: Switch job context	Allows users to execute jobs with user context changes.
88	Server: Execute Ado jobs	Allows users to run ADO jobs if the security system allows it. The following registry entry is required for this system role: Security\SecureJobs=1

Click Extras in the menu bar to show or hide system role IDs of the system roles in the remote user administration and the configuration dialog of the security system.