Assigning security roles to a folder

Security roles can only be applied to a folder by users who have the Assign Roles privilege for that folder. Folder security may be inherited from its parent folder or explicitly defined for the folder.

Note    If no roles are assigned to a vault, then no security restrictions are applied and everyone has full access to all documents in the vault. As soon as one role is assigned to the vault, that is the only role with access to the vault until other roles are assigned. We recommend that you first assign at least yourself to the role with the most privileges for the root level of the vault first before assigning any other roles. This will prevent locking yourself out of the vault or from being able to modify roles and role assignments. The role should have the Change configuration privilege in the Vault group and the Assign roles privilege in the Folder group.

For information on configuring security roles, see “About vault security” in the BlueCielo Meridian Enterprise Configuration Guide and “Understanding Meridian Enterprise role-based security” in the BlueCielo Meridian Enterprise Administrator’s Guide.

Before you begin

Assigning roles to a folder is typically reserved for system administrators who know what privileges have been enabled for each role in a vault. If you do not know the capabilities of each role, consult a system administrator before proceeding.

To assign roles to a folder:

1. In the Explorer view of PowerUser, select the folder to which you want to assign roles.
2. Select Assign Roles from the Folder menu. The Assign Roles dialog box appears. If Inherit from parent folder is enabled, the roles list is empty and the folder has the same role assignments as its parent, which might inherit its roles from its parent, and so on all of the way up the folder structure to the root of the vault.
3. To disable role assignment inheritance and explicitly assign roles to the folder, disable Inherit from parent folder. The Add button becomes enabled.
4. Click Add. The Add User Role Assignment dialog box appears.
5. Select a role from Add to role.
6. To assign a group to the selected role, enable Group and type or select a group name from the adjacent list. To assign a user to the selected role, enable User and type or select a user name from the adjacent list.
7. Click Check Name to validate the selected name.
8. Click OK. The role assignment is added to the list.
9. Repeat steps 4 through 8 to assign more roles to the folder.
10. Select a role assignment and click Remove to remove the role assignment.
11. Click OK. The current role assignments are applied to the current folder.