Skip to main content

What document access rights control

Document access rights decide what each user group can do with documents of a given document type — view them, create them, modify keywords, delete, print, mail, manage revisions, and more. They are the layer that governs day-to-day work with documents, granted per document type and per user group.
Document access rights are different from application permissions. Application permissions decide who can use the admin and configuration screens; document access rights decide what users can do with documents themselves. A user typically needs the right document access rights to do their job, and only administrators need application permissions. See Permissions & access for the full model.
You manage them under Admin settings → Documents → Access rights (open Admin settings from your profile menu at the bottom-left of the sidebar). Edit them two ways:
  • By document type — pick a type and set every group’s privileges on it.
  • By group — pick a user group and see, across all document types, what it can do.
Access rights matrix for a document type with user groups as columns and privilege checkboxes grouped by Documents, Keywords, and Revisions categories

The privileges

Privileges are grouped into three categories. Grant only what each group needs.

Documents

PrivilegeAllows
ViewOpen and read documents of this type.
CreateUpload and index new documents.
ModifyChange document content.
DeleteRemove documents.
RotateRotate document pages.
Re-indexMove a document to a different type or change its core indexing.
PrintPrint documents.
Mail / Mail internalSend documents externally or to internal users.
Document historySee a document’s activity history.
Copy to clipboardCopy document content out.
Create referenceCreate references to the document.

Keywords

PrivilegeAllows
View keywordsSee the document’s keyword values.
Modify keywordsChange keyword values.
Access restricted keywordsView and edit keywords protected as restricted.

Revisions & versions

PrivilegeAllows
Revision controlWork with the document’s revision history.
Create / delete revisionsAdd or remove revisions.
View versionsSee document versions.
Create versionsCreate new versions.

Granting access

  1. Open Admin settings → Documents → Access rights and choose the by document type or by group view.
  2. Select the document type (or group) to edit.
  3. Tick the privileges each group should have. Changes are held as a draft.
  4. Save to apply, or Discard to revert.

Bulk grant

To give a group a common set of privileges across many document types at once, use Bulk grant. Pick a privilege set — for example a read-only or contributor preset — and apply it to several types in one action, instead of editing each type individually.
Start from the least privilege that lets a group work — typically View and View keywords — and add more deliberately. It’s easier to widen access later than to discover it was too broad.

Permissions & access

How document access rights fit into the wider access model alongside application permissions and security keywords.

Document types

The document types whose access you’re granting.