Security Rights Available for a Repository

Right Name

Description

BAM Rights

Workflowscope_Any

This right controls the access to view all workflow reports.

BAM Report Rights

This right controls the access to BAM Report Rights to specify the rights for BAM Tree Menu Rights, Views, Actions and BAM Configuration.

Can View BAM Control

This right controls the access to view the BAM Report section.

Can View Global Reports

This right controls the access to view the Global Reports option in the drop-down of the BAM Report section.

Workflowscope_InitiatedWorkflow

This right controls the access to view the report of the triggered workflow in the BAM Report section.

Workflowscope_OwnedWorkflow

This right controls the access to view the reports of the workflows that are triggered by another user who is logged in.

Calendar Control Rights

Can Add Calendar

This right controls the access to add a new calendar.

Can Add Resource Calendar

This right controls the access to add a new resource calendar.

Can Delete Calendar

This right controls the access to delete an existing calendar.

Can View All Calendars

This right controls the access to view all calendars.

Can View Base Calendar

This right controls the access to view the base calendar.

Can View Calendar Control

This right controls the access to view the calendar control.

Generic List Actions

Can See All Versions

This right controls the access to view all versions of the selected item.

Can Change Owner

This right control the access to the change owner option of the selected item.

Can View Child Items

This right controls the access to view the child items of the selected item.

Can Create Item

This right controls the access to create an item at the list level and to create a child item inside another item at the ListItem level.

Can Create Folder

This right controls the access to create a new folder.

Can Delete Item

This right controls the access to delete items.

Can Disable Item

This right controls the access to disable items.

Can Edit Item

This right controls the access to edit items.

Can Enable Item

This right controls the access to enable the disabled listitems.

Package Item

This right controls the access to add artifacts to a package template.

Can Publish Item

This right controls the access to publish items.

Can Save As

This right controls the access to save items.

Can Save As Next Major Version

This right controls the access to save the next major version of an item.

Can Save As Next Minor Version

This right controls the access to save the next minor version of an item.

Can Save As Next Version

This right controls the access to save the next version of an item.

Can Save As Specific Version

This right controls the access to save a specific version of an item.

Can TestRun

This right controls the access to view the execution of the published workflow and also the execution view of an item.

Can UnPublish Item

This right controls the access to unpublish the published listitems.

Can View Audit History

This right controls the access to view the audit history of an item. Currently, this is implemented for the workflow list and dynamic lists only.

Can View Item Details

This right controls the access to view the item details in the dynamic list in the read-only mode. This right control is a drop-down list with allow, disallow and owned items only at the dynamic list and list items levels. For the rest of the levels (repository, other list and list item levels), this right control is a check box.

Can View Properties

This right controls the access to view the properties of an item.

Can Consume Item

This right controls the access to consume an item (it may be in lookups or any place where list items get consumed).

Can View Disabled Item

This right controls the access to view disabled items.

Can View Item

This right controls the access to view an item.

Can View Others' Draft Folder

This right controls the access to view others' drafted folders.

Can View Others' Draft Item

This right controls the access to view others' draft items. By default, the user can see the items  published by others but not their draft items.

Show Only Owned Item

This right controls the access to view only owned listitems.

Note: This right will take the highest preference. For example, if the logged-in user has some other rights like CanViewPendingItem, CanViewDisabledItem, CanViewOthersDrafItem set to true then in that case, the CanViewPendingItem, CanViewDisabledItem, CanViewOthersDrafItem etc. rights will not be useful for the logged in user because the user can view only the owned listitems.

Show Work In Progress Item

This right controls the access to view work in progress items.

Manage Package List Rights

Install

This right controls the access to install the package.

Uninstall

This right controls the access to uninstall the package.

Package Template List Rights

Export

This right controls the access to export the package template.

Generate

This right controls the access to generate the package template.

Mark as Shipped

This right controls the access to mark the package template as shipped.

Queue Control Rights

Can Add New Queue

This right controls the access to add a new queue.

Can View Queue Control

This right controls the access to view queue control.

Manage Queues

This right controls the access to modify/delete queues.

Web Parts Rights

Add Web Parts

This right controls the access to add Web Parts to the home page.

Delete Web Parts

This right controls the access to delete the Web Parts properties of the home page.

Edit BAM Personalization Scope

This right controls the access to change the personalization scope for the BAM control page.

Edit Calendar Personalization Scope

This right controls the access to change the personalization scope for the Calendar control page.

Edit Home Page Personalization Scope

This right controls the access to change the personalization scope for the logged-in user.

Edit Queue Personalization Scope

This right controls the access to change the personalization scope for the Queue control page.

Edit Web Parts

This right controls the access to edit the Web Parts properties of the home page.

Edit Personalization Scope

This right controls the access to change the personalization scope for the Work Items List Control page.

Default Workitemhome Page

This right controls the access to specify the default home page for the security group.

Personalize BAM Control

This right controls the access to personalize the BAM Control.

Personalize Calendar Control

This right controls the access to personalize the Calendar Control.

Personalize Queue Control

This right controls the access to personalize the Queue Control

Personalize Work item Control

This right controls the access to personalize the Work Items List Control.

Reset User Personalization Scope

This right controls the access to reset the personalization data for “user scope”.

Show Home Page Web Part Settings

This right controls the access to see the home page Web Parts setting.

Show Ribbon Bar

This right controls the access to make visible/invisible the ribbon bar of the List Control Web Part.

Workflow List Rights

Can Create Associations

This right controls the access to create associations for list items.

Can Create BAM Workflow

This right controls the access to create BAM Workflow.

Can Create List Workflow

This right controls the access to create List Workflow.

Can Design Workflow

This right controls the access to design Workflow.

Can Overwrite Published Workflow

This right controls the access to modify (re-design) the published workflow. It is specific to the “Workflow List” and set to false for all security groups by default.

Can Overwrite Published Form

This right controls the access to modify (re-design) the published Form. It is set to false for all security groups by default.

Can Provision Now

This right controls the provisioning feature of workflow.

Can Run Workflow Wizard (this option is not applicable)

This right controls the access to the wizard feature to create workflow.

Can Do Tasks

This right controls the access to tasks like design workflow, start workflow wizard, provision now etc on an item in the workflow list.

Can View Associations

This right controls the access to view the associations of an item in the workflow list.

Can View Workflow Design

This right controls the access to view the process definition (design) of an item in the workflow list.

Can View Exceptions

This right controls the access to view the exceptions of an item in the workflow list.

Process Designer Rights

This right controls the access to set the action rights and menu rights. See Process Designer Rights for more details.

Work Item Rights

Can Forward Work Item

This right controls the access to forward a work item to another actor which is assigned.

Can Kill Work Item

This security right is to grand/deny permission to abort workflow instances.

Can Set Alternate Actor

This right controls the access to set an alternate actor.

Can Set Preferences

This right controls the access to set preferences.

Can View Queue

This right controls the access to queue control.

Can View Resource Calendar

This right controls the access to view resource calendar.

Can View Work Item Control

This right controls the access to view the work item control itself.

Work Tasks Pro App

Default Home Page

This right controls the access to specify the default home page for the security group in the Work Tasks Pro app.

Note: Ensure that you log off from and log in to the Work Tasks Pro app after you make any changes in the dashboard form or its configuration.

Other Rights

Can Fill Form

This right controls to access the form to fill.

Can Access List

This right can be used to control the access to lists that are available in the repository.

Can Manage Security

This right controls the access to define security. If the Can Manage Security right is set to false then the Repository Settings option is not displayed at the right corner.