Folder privileges

You are here: Security privilege descriptions > Folder privileges

Folder privileges

Folder privileges control access to the folders to which the privileges have been assigned. Some of these privileges are only available for custom folder types.

Folder privileges
Privilege	Description
Assign Roles	Allows the user to assign other users to security roles for the folder. This privilege should be restricted to managers or administrators. Warning As soon as a role is assigned to a folder, access to that folder is restricted to the users that are assigned to that role. For more information on creating and using security roles, see Creating and editing security roles.
Copy Document	Allows the user to copy existing documents in the folder.
Create Child Folder	Allows the user to create subfolders of the parent folder to which this privilege is assigned. Note This privilege is also required for users to create documents that would result in the creation of a new folder in the Field-Path definition. For more information on the Field-Path definition, see About the Field-Path definition.
Create Child Folder Manually	Allows the user to create subfolders manually.
Create Document	Allows the user to create documents in the folder.
Create Document from Script	Allows vault script to create documents on behalf of the user in folders of that type. An example of such scripting is the Document.MoveTo method that technically creates a new document object. This privilege is intended to support customization in which the user is not granted the Create Document privilege for the destination folder. This privilege is only available for custom folder types, not normal folders.
Create folder of this type	Allows the user to create folders of the custom folder type. The folder type is the name of the group in which the privilege appears.
Delete Child Folder	Allows the user to delete subfolders of the parent folder to which this privilege is assigned.
Delete Released Files from Shared Workspace	When the shared folder option Delete documents from workspace when released from workflow is enabled, this privilege allows the documents to be deleted if the user has not been granted the Delete Document privilege.
Create project copy from	Required to run the Create Project Copy and Create Project Copy and Lock commands on documents in the selected folder.
Create project copy in	Required to run the Create Project Copy and Create Project Copy and Lock commands with the selected folder as the destination.
Delete Document	Allows the user to delete documents from the folder.
Edit shared workspace settings	Allows the user to modify the options on the Sharing details group on the Folder tab of a folder that is configured as a shared workspace.
List Content	Allows the user to view documents within the folder. A user that does not have this privilege can see the folder, but cannot view the documents within the folder and cannot edit them. If the user does not have this privilege to the root folder of the vault and the Hide vaults to which a user has no access option is enabled for the EDM Server in Meridian Enterprise Administrator, the vault will be hidden for that user in all vault selection dialogs and in the Meridian Web Client.
Move Away From Folder	Allows the user to move documents to a different folder.
Override Duplication Rules Defaults	Allows the user to override the Duplicator Default Action setting of document types when using the Copy with References or Derive with References commands. For more information on this setting, see Creating and editing document types.
Purge Document	Allows the user to use the Purge command to permanently destroy documents.
Rename	Allows the user to rename folders.
Undelete Child Folder	Allows the user to recover deleted subfolders.
Undelete Document	Allows the user to recover deleted documents.

Folder privileges

Privilege

Description

Assign Roles

Allows the user to assign other users to security roles for the folder. This privilege should be restricted to managers or administrators.

Warning As soon as a role is assigned to a folder, access to that folder is restricted to the users that are assigned to that role. For more information on creating and using security roles, see Creating and editing security roles.

Copy Document

Allows the user to copy existing documents in the folder.

Create Child Folder

Allows the user to create subfolders of the parent folder to which this privilege is assigned.

Note This privilege is also required for users to create documents that would result in the creation of a new folder in the Field-Path definition. For more information on the Field-Path definition, see About the Field-Path definition.

Create Child Folder Manually

Allows the user to create subfolders manually.

Create Document

Allows the user to create documents in the folder.

Create Document from Script

Allows vault script to create documents on behalf of the user in folders of that type. An example of such scripting is the Document.MoveTo method that technically creates a new document object. This privilege is intended to support customization in which the user is not granted the Create Document privilege for the destination folder. This privilege is only available for custom folder types, not normal folders.

Create folder of this type

Allows the user to create folders of the custom folder type. The folder type is the name of the group in which the privilege appears.

Delete Child Folder

Allows the user to delete subfolders of the parent folder to which this privilege is assigned.

Delete Released Files from Shared Workspace

When the shared folder option Delete documents from workspace when released from workflow is enabled, this privilege allows the documents to be deleted if the user has not been granted the Delete Document privilege.

Create project copy from

Required to run the Create Project Copy and Create Project Copy and Lock commands on documents in the selected folder.

Create project copy in

Required to run the Create Project Copy and Create Project Copy and Lock commands with the selected folder as the destination.

Delete Document

Allows the user to delete documents from the folder.

Edit shared workspace settings

Allows the user to modify the options on the Sharing details group on the Folder tab of a folder that is configured as a shared workspace.

List Content

Allows the user to view documents within the folder. A user that does not have this privilege can see the folder, but cannot view the documents within the folder and cannot edit them.

If the user does not have this privilege to the root folder of the vault and the Hide vaults to which a user has no access option is enabled for the EDM Server in Meridian Enterprise Administrator, the vault will be hidden for that user in all vault selection dialogs and in the Meridian Web Client.

Move Away From Folder

Allows the user to move documents to a different folder.

Override Duplication Rules Defaults

Allows the user to override the Duplicator Default Action setting of document types when using the Copy with References or Derive with References commands. For more information on this setting, see Creating and editing document types.

Purge Document

Allows the user to use the Purge command to permanently destroy documents.

Rename

Allows the user to rename folders.

Undelete Child Folder

Allows the user to recover deleted subfolders.

Undelete Document

Allows the user to recover deleted documents.

Related concepts

Security privilege descriptions

Understanding security roles