System Roles

enaio® 11.0

The following system roles can be assigned to individual users in enaio® administrator:

ID	System role	Description
66	DMS: Set up local security groups	Configure remote areas
18	DMS: Supervisor	All system roles except for those for workflow functions, enaio® enterprise-manager, and 'Server: Switch job context' Required in enaio® webclient to call up the user administration from enaio® webclient and edit supervisor fields.
1	Administrator: Start	Start enaio® administrator
2	Administrator: Configure entire system	Configure the entire system (LDAP, automatic actions, etc.)
4	Administrator: Configure security system	Configure the security system (user and rights management)
65	Administrator: Configure local security groups	Restricted configuration of the security system for remote areas.
5	Administrator: Configure W-templates	Manage W-templates (configuration of W-templates and assigned applications) The 'Administrator: Configure security system' system role is also required.
6	Administrator: Configure archive print	Set up archive print
8	Administrator: Start automatic actions	Start installed automatic actions
9	Administrator: Configure automatic actions	Set up and configure automatic actions
10	Administrator: View user trays	View the private filing trays of all users in enaio® administrator
50	Administrator: Edit object rights	Specify other users as owners or adopt ownership of object
11	Editor: Start	Start enaio® editor
12	Editor: Edit object definition	Change and modify object definition This role by itself does not enable you to save changes in the database.
13	Editor: Customize database	Make changes to the database
96	Editor: Define visibilities	Set up specialist administrators with access to individual cabinets
14	Start: Start	Start enaio® start in order to execute automatic actions
15	Capture: Start	Start enaio® capture
87	Capture: Edit filing tray	Access to the filing tray in enaio® capture
16	Capture: Configure	Set up configurations for enaio® capture
36	Client: Start	Start enaio® client
70	Webclient: Start	Start enaio® webclient
101	Webclient: Open location	Opens a location in enaio® webclient
103	Webclient: Use saved searches	enaio® webclient SR1: Use saved searches URL calls are permitted.
104	Webclient: Use object references	enaio® webclient SR1: Use object references in the desktop
105	Webclient: Use subscriptions	enaio® webclient SR1: Use subscriptions
106	Webclient: Use follow-ups	enaio® webclient SR1: Use follow-ups
107	Webclient: Show history	enaio® webclient SR1: Show history
17	Client: Save personal settings	Configure individual user settings and save searches and/or documents to the object search of clients
80	Client: Configure external applications	Integrate external applications into clients
77	Client: Customize ribbon	Customize the ribbon
28	Client: Open history	View editing history, if this is enabled
32	Client: Recover data from history	Restore earlier data via the editing history (condition: 'Client: Open history' system role is available)
56	Client: Configure history for individual object	Allows the history to be configured for a single document, provided that this option is available in the object definition (condition: 'Client: Open history' system role is available)
29	Client: Start expert mode	Advanced search for objects
97	Client: Export index data	Export index data from lists using the Export function Also applies for enaio® webclient.
30	Client: Export document contents	Export document files from lists using the Export function Also applies for enaio® webclient. It is always possible to export documents that have been edited in external applications this way.
74	Client: Print documents	Print document via clients Also applies for enaio® webclient. It is always possible to print documents that have been edited in external applications this way.
94	Client: Scan documents	Scan documents via clients
99	Client: Open links	Open links Also applies for enaio® webclient.
100	Client: Edit links	Edit links Also applies for enaio® webclient.
71	Client: Open notes	Show notes on and links to objects Also applies for enaio® webclient.
31	Client: Edit notes	Edit and delete notes on and links to objects Also applies for enaio® webclient.
33	Client: Show personal recycle bin	Show the personal recycle bin from which deleted data can be restored Also applies for enaio® webclient.
37	Client: Show system recycle bin	Show system recycling bin in which the deleted objects of all users are displayed (condition: 'Client: Show personal recycle bin' system role is available)
40	Client: Delete objects from recycle bin	Permanently delete objects in the recycle bin Also applies for enaio® webclient. (condition: 'Client: Show personal recycle bin' system role is available)
34	Client: Run SQL queries	Run SQL queries Also applies for enaio® webclient.
85	Client: Share documents	Share documents with users with limited access rights
86	Client: Manage sharing options	Remove shares of other users
35	Client: Send content as e-mail	Send objects to a recipient as content via e-mail and place into the clipboard Also applies for enaio® webclient.
44	Client: Open properties	Show property dialog for an object
63	Client: Move objects	Move objects, if permitted in enaio® administrator Also applies for enaio® webclient.
79	Client: Move across cabinets	Move documents across cabinets
102	Client: Copy across cabinets	Copies documents across cabinets
83	Client: Assign further locations	Assign another location to documents, if permitted in enaio® administrator Also applies for enaio® webclient.
84	Client: Create reference documents	Create reference documents from documents Also applies for enaio® webclient.
19	Client: Use workflow	Use workflows Also applies for enaio® webclient.
90	Client: Show workflow substitutions	See for whom the user is a substitute.
61	Client: Workflow substitute configuration	Set up workflow substitutes for yourself
62	Client: Workflow process administration	Restricted management of running processes from clients The administration of running processes is also permitted via system role 20: Cancel process, cancel process step, clear personalization, assign process step.
67	Client: Edit workflow circulation slip	Edit workflow circulation slip Also applies for enaio® webclient.
68	Client: Manage private circulation slip templates for workflows	Manage and delete templates for private circulation slips Also applies for enaio® webclient.
69	Client: Manage public circulation slip templates for workflows	Manage and delete templates of public circulation slips Also applies for enaio® webclient.
51	Client: Use object search	Show 'Object search' area Also applies for enaio® webclient.
52	Client: Use navigation	Show 'Navigation' area
78	Client: Run default search	If users should run searches exclusively via saved searches, then the standard search (search by index data and full-text search) can be switched off using this system role. Also applies for enaio® webclient.
95	Client: Show number of objects in register tree	The folder type option 'Determine number of objects in register tree' is not available to users. The rights system is ignored when determining the number of objects. For that reason, this data is imprecise in enaio® client.
59	Client: Add icon	Include icons in the system's data pool
60	Client: Delete icon	Remove icons from the system's data pool
64	Client: Edit static layers of other users	Edit static layers you did not create yourself
93	Client: Manage public desktop	Manage the public desktop for all users
38	Client: Edit SQL queries	Create and edit SQL queries
92	Client: Subscriptions for others	Allows users to create subscriptions for other users Also applies for enaio® webclient.
39	Client: Manage subscriptions	Manage and delete subscription of all users Also applies for enaio® webclient.
91	Client: Follow-ups for others	Allows users to create follow-ups for other users Also applies for enaio® webclient.
55	Client: Manage follow-ups	Manage and delete follow-ups of all users Also applies for enaio® webclient.
98	Client: Undo the checkout for others	Undo the checkout of documents of other users. The 'Write object' right for the document type is also required.
45	Client: Debug events	Run events for the client in debug mode
49	Client: Create events	Edit events for client and server
75	Client: Change archiving status	Give documents the property 'archivable' or 'non-archivable' Also applies for enaio® webclient.
53	Client: Delete archived documents	Delete documents with the 'archived' status Also applies for enaio® webclient.
57	Client: Execute changes in batch mode	Carry out collective editing for several selected objects in a hit list
73	Client: Always show variant administration	Users who have no write permissions for index data or objects can open variant administration in read-only mode, but are not allowed to create new variants or assign the 'active variant' status to other variants Also applies for enaio® webclient.
76	Client: Show favorites	Favorites are managed and displayed for each user. Also applies for enaio® webclient.
81	Client: View preview annotations	Show annotations in the PDF preview Also applies for enaio® webclient.
82	Client: Edit preview annotations	Create, edit, and delete annotations in the PDF preview Also applies for enaio® webclient.
20	WF-Admin: Start	Start enaio® administrator-for-workflow In addition, functions are permitted in the client: Cancel process, cancel process step, clear personalization, assign process step (see system role 62).
21	WF-Editor: Start	Start enaio® editor-for-workflow
22	WF-Editor: Edit organization	Edit workflow organization
58	WF-Editor: Report presence/absence of users	Set presence of other workflow users
23	WF-Editor: Create model	Create workflow model
24	WF-Processes: Start via import	Start workflow processes via a system import which is run via the automatic action 'Data/document import'
25	WF-Simulation: Start	Start a workflow simulation
26	WF-Script: Start	Start runtime environment for workflow scripts
27	Enterprise-Manager: Start	Start enaio® enterprise-manager
72	Server: Switch job context	Allows users to execute jobs with user context changes. Also applies for enaio® webclient.
88	Server: Execute Ado jobs	Allows users to run ADO jobs. The following registry entry is required for this system role: Security\SecureJobs=1

Click Extras in the menu bar to show or hide system role IDs of the system roles in the remote user administration and the configuration dialog of the security system.