The permission catalogue
Application permissions are organised into areas, each covering one part of the platform. Within an area, permissions come in tiers — typically View, Manage, and Admin — that build on each other. This page summarizes the main areas. The live Permissions screen is the authoritative catalogue for your installed version. You’ll see these exact areas and permissions on the Permissions screen, where you grant them to user groups.Identity & access
Who can manage users, groups, and the permissions themselves.Document structure
Who can configure document types, document type groups, keyword assignments, and document access rights. See Document types.Keyword configuration
Who can configure keyword types, keyword type groups, and autofill keyword sets. See Keyword types.Form configuration
Who can design the form templates that show, create and edit form documents.
These permissions are granted automatically to the MANAGER and NOBLY-MANAGERS user groups, where those groups exist, when form documents become available. They cover template design only: opening, creating and editing form documents is governed by document access rights. See form documents administration for what users need.
Client settings
Who can configure platform behaviour for upload, keywords, and shared searches.
In each pair, Manage includes everything View grants.
Pending uploads
Who can put files on the pending uploads queue, and who can work it in the upload tool.
Nobody holds either permission until you grant it, and neither includes the other. Archiving files from the queue still needs document access rights for their document type.
Retention
Who can run and govern the retention and deletion features. This area has the most permissions, covering policies, document actions, approvals, legal holds, simulation, quarantine, and reports.
The retention permissions are described in context in the Retention & deletion section.
Automation, AI, and integrations
Use the area’s configuration guide to choose the smallest grant that covers the task:
ContentFlow has its own permission catalogue in its separate application. Insight grants do not implicitly administer ContentFlow.
Where to read next
Managing permissions
Grant and revoke application permissions for user groups on the Permissions screen, with staged changes and an audit trail.
The access model
How application permissions fit alongside document access rights and security keywords.