ContactManager user roles

A role is a collection of permissions. By grouping permissions into roles, you can define the authority of a user of ContactManager by assigning the user a few roles rather than a larger list of permissions. A user can have multiple roles and must have at least one role.

The permissions used for contact access in the base configuration of ContactManager are abcreate, abcreatepref, abdelete, abdeletepref, abedit, abeditpref, abview, abviewpending, abviewmerge, abviewpending, abviewsearch, anytagcreate, anytagdelete, anytagedit, and anytagview.

These permissions are described in more detail in the topic, ContactManager contact subtype and tag permissions.

You can create additional permissions for certain contacts, contact subtypes, or tags. For example, you can create a permission for working with client contacts and another for working with vendor contacts.

To add permissions to roles and assign roles to users, use the ContactManager Roles screen. Log in as a user with administration privileges and click the Administration tab, and then navigate in the sidebar to Users & Security > Roles. See Configuring ContactManager contact security.

The base configuration of ContactManager provides the following roles, each of which has a set of default permissions. It is likely that you will add your own roles and permissions as well.

Role	Permissions	Description
Client Application	Client Application – `clientapp` Create address book contacts – `abcreate` Create address book preferred vendors – `abcreatepref` Add documents to a contact – `doccreate` Create contact with any tag – `anytagcreate` Delete address book contacts – `abdelete` Delete address book preferred vendors – `abdeletepref` Delete contact with any tag – `anytagdelete` Edit address book contacts – `abedit` Edit address book preferred vendors – `abeditpref` Edit contact with any tag – `anytagedit` Edit documents – `docedit` Edit user language – `usereditlang` Remove documents from a contact – `docdelete` View address book contact search screens – `abviewsearch` View address book contacts – `abview` View contact with any tag – `anytagview` View documents – `docview`	This role is used by core applications to communicate with ContactManager. It contains permissions that allow the core applications to perform specific tasks.
ContactManager	Create address book contacts – `abcreate` Create address book preferred vendors – `abcreatepref` Create contact with any tag – `anytagcreate` Add documents to a contact – `doccreate` Delete address book contacts – `abdelete` Delete address book preferred vendors – `abdeletepref` Delete contact with any tag – `anytagdelete` Edit address book contacts – `abedit` Edit address book preferred vendors – `abeditpref` Edit contact with any tag – `anytagedit` Edit documents – `docedit` Edit user language – `usereditlang` View address book contact search screens – `abviewsearch` View address book contacts – `abview` View contact with any tag – `anytagview` View documents – `docview` View merge – `abviewmerge` View pending – `abviewpending`	User with full permission to create, edit, and delete contacts.
Contact Subtype Changer	Change Contact Subtype – `changecontactsubtype` SOAP administration – `soapadmin`	User with permissions to change the subtype of a contact instance.
Contact Viewer	Edit user language – `usereditlang` View address book contact search screens – `abviewsearch` View address book contacts – `abview` View contact with any tag – `anytagview`	User with view-only permissions for contacts
Data Protection Officer	Create groups – `groupcreate` Delete groups – `groupdelete` Edit groups – `groupedit` Edit obfuscated user contact – `editobfuscatedusercontact` Edit user language – `usereditlang` Edit users – `useredit` Grant roles to users – `usergrantroles` Request Contact Destruction – `requestcontactdestruction` View all users – `userviewall` View group tree – `grouptreeview` View groups – `groupview` View user – `userview`	User who can respond to failures in contact purging or obfuscation with corrections
Rule Admin	Administer rules – `ruleadmin` Edit user language – `usereditlang`	Rule administrator
Tools View	View BatchProcess tools screen – `toolsBatchProcessview` View Cache Info screen – `toolsCacheinfoview` View Cluster tools screen – `toolsClusterview` View Info tools screen – `toolsInfoview` View Log tools screen – `toolsLogview` View ManagementBeans tools screen – `toolsJMXBeansview` View Profiler tools screen – `toolsProfilerview` View StartablePlugin tools screen – `toolsPluginview` View WorkQueue tools screen – `toolsWorkQueueview`	User with permission to work on the Server Tools screens. To access Server Tools, press `Alt+Shift+T` and click Server Tools.
User Admin	Always access debug tools – `usereditattrs` Create groups – `groupcreate` Create users – `usercreate` Delete groups – `groupdelete` Delete users – `userdelete` Edit groups – `groupedit` Edit user language – `usereditlang` Edit users – `useredit` Grant roles to users – `usergrantroles` Manage attributes – `attrmanage` Manage holidays – `holidaymanage` Manage regions – `regionmanage` Manage roles – `rolemanage` Manage script parameters – `scrprmmanage` Manage security zones – `seczonemanage` Resync message – `resyncmessage` Retry message – `retrymessage` Skip message – `skipmessage` SOAP administration – `soapadmin` View attributes – `attrview` View event messages – `eventmessageview` View group tree – `grouptreeview` View groups – `groupview` View holidays – `holidayview` View regions – `regionview` View roles – `roleview` View script parameters – `scrprmview` View user – `userview`	User who handles administration of ContactManager users.