.. _conf.usm.user_roles:

=================
Manage User Roles
=================

User roles define the permissions and level of access that a user has to specific functions in the system. You can create and manage user accounts on the **Roles** tab of the **User Management** pane as described below.


Create A New Role
*****************

1. Choose :menuselection:`Configuration --> User Management` from the menu and go to the **Users** tab.
2. Click |add| **Add Role** on the top of the tab page.

   ..  admonition:: Result 
       
    A new row for the user role gets added to the grid under **Roles**. 

3. Enter the name of the new user role in the **Name** field of the new row.
4. Click |addblue| in the **Actions** column to save the new entry.
5. Proceed with assigning users and defining permissions as described in :ref:`conf.usm.user_roles.manage`.


.. _conf.usm.user_roles.manage:

Manage User Roles
*****************

Once a user role has been created in the system, you can update its name, assign users to it, set up permissions or delete it using the corresponding button in the **Actions** column on the **Roles** tab. See below for more details.


Edit Role Name
--------------

1. Click |edit| in the **Actions** column for the required role.
2. Update the **Name** field in the grid as required.
3. Click |saveblue| in the **Actions** column to save your updates or |cancel| if you want to discard your changes.

Assign Users to Roles
---------------------

1. Click |user| in the **Actions** column for the required role.
2. In the dialog that opens, select the users that you want to assign to this user role.
3. Click **Update** to save your changes or **Cancel** to cancel user assignment.

Set Up Permissions
------------------

1. Click |setting| in the **Actions** column for the required role.
2. In the dialog that opens, you will see a list of areas and functions for which you can set permissions (first column of the grid). For each item, you can select the types of permissions that the user with this role can have. The available permission types are:


   .. list-table:: 
      :widths: 2 5
      :header-rows: 1
      :class: tight-table

      * - Permission Type
        - Description
      * - **Disabled**
        - The function is disabled for the user and is not visible.
      * - **View**
        - Allows the user to view content but not make any changes.
      * - **New**
        - Allows the user to create new entries in this area.
      * - **Modify**
        - Allows the user to make changes to existing entries.
      * - **Delete**
        - Allows the user to delete entries.
      * - **ExeSchedule**
        - 
      * - **AppHierarchy**
        - 
      * - **Option**
        - 

   .. tip:: Use the checkboxes at the top of each column to select the specific permission type for each area in the list.


3. Click **Update** to save your changes or **Cancel** to discard them.



Delete Roles
------------

1. Click |delete| in the **Actions** column for the required user role.
2. In the dialog that opens, click **Delete** to confirm deletion or **Cancel** to cancel deletion.
   
   ..  admonition:: Result 
       
    The user role is deleted from WIP and the entry is removed from the grid.



.. |add| image:: images/icon.add.png

.. |edit| image:: images/icon.edit.png

.. |delete| image:: images/icon.delete.png

.. |setting| image:: images/icon.setting.png

.. |user| image:: images/icon.user.png

.. |addblue| image:: images/icon.add.blue.png

.. |saveblue| image:: images/icon.save.blue.png

.. |cancel| image:: images/icon.cancel.png