[{"data":1,"prerenderedAt":281},["ShallowReactive",2],{"guide:en:admin\u002Froles":3},{"id":4,"title":5,"body":6,"description":273,"extension":274,"meta":275,"navigation":276,"path":277,"seo":278,"stem":279,"__hash__":280},"guide_en\u002Fguides\u002Fen\u002Fuser\u002Fadmin\u002Froles.md","Roles",{"type":7,"value":8,"toc":265},"minimark",[9,13,17,24,29,36,90,94,116,125,131,135,140,146,153,156,209,219,223,226,250,256],[10,11,5],"h1",{"id":12},"roles",[14,15,16],"p",{},"A role is a set of restrictions and tags. Each restriction blocks the actions it names on the records its condition matches. Everyone who holds the role is held to it. A person's admin rights say what they may do; their roles narrow which records they may do it on.",[14,18,19],{},[20,21],"img",{"alt":22,"src":23},"A role open in the Roles window, with its rights and restrictions","\u002Fguides\u002Fscreens\u002Fguide\u002Fadmin\u002Froles--role.webp",[25,26,28],"h2",{"id":27},"the-roles-window","The Roles window",[14,30,31,35],{},[32,33,34],"strong",{},"Admin › Users › ⋯ More › Roles"," opens the window: every role on the left, the selected role on the right. A row shows how many restrictions the role has.",[37,38,39,73,87],"ul",{},[40,41,42,45,46,49,50,53,54,53,57,60,61,64,65,68,69,72],"li",{},[32,43,44],{},"Filter by name"," searches the roles. ",[32,47,48],{},"Filters"," narrows by whose roles they are (",[32,51,52],{},"Mine",", ",[32,55,56],{},"Not mine",[32,58,59],{},"Others","), by the ",[32,62,63],{},"Model"," and ",[32,66,67],{},"Field"," a restriction covers, by the actions it is ",[32,70,71],{},"Restricted From",", and shows deleted roles.",[40,74,75,78,79,82,83,86],{},[32,76,77],{},"Add role"," starts a new role. ",[32,80,81],{},"⋯ More"," holds ",[32,84,85],{},"Import roles"," and the exports.",[40,88,89],{},"Tick roles to change them together, print, delete or restore them.",[25,91,93],{"id":92},"a-roles-form","A role's form",[14,95,96,97,100,101,53,104,107,108,111,112,115],{},"A role has a ",[32,98,99],{},"Name",", an ",[32,102,103],{},"Owner",[32,105,106],{},"Tags"," and its ",[32,109,110],{},"Restrictions",". ",[32,113,114],{},"Save"," writes the role.",[14,117,118,119,124],{},"People who hold the role arm its tags. Every record they create then carries them. See ",[120,121,123],"a",{"href":122},"\u002Fguides\u002Fprofile#tags-following-you","My profile",".",[14,126,127,128,124],{},"You give a person a role from their window in ",[32,129,130],{},"Users",[25,132,134],{"id":133},"restrictions-as-sentences","Restrictions, as sentences",[14,136,137,139],{},[32,138,110],{}," reads in plain language:",[141,142,143],"blockquote",{},[14,144,145],{},"Members of the Field Technician role can do everything except:\n• Delete Work Order records where name is \"freckle\".\n• Create & Edit Work Order records where status is any of \"completed\", \"in-progress\".",[14,147,148,149,152],{},"Each line is one restriction. A line that blocks nothing yet reads ",[32,150,151],{},"Blocks nothing yet",", because it has no action chosen.",[14,154,155],{},"Press a line to edit it:",[37,157,158,163,168,174,191],{},[40,159,160,162],{},[32,161,63],{},": the kind of record, such as Work Order, Site or Feature. Feature also covers assets.",[40,164,165,167],{},[32,166,67],{},": the field to test. Pick one of the model's fields or type a property name.",[40,169,170,173],{},[32,171,172],{},"Comparison",": is, is not, is greater than, is at least, is less than, is at most, contains, is any of, is none of, or is between.",[40,175,176,179,180,64,184,187,188,124],{},[32,177,178],{},"Value",": one value, a list for ",[181,182,183],"em",{},"is any of",[181,185,186],{},"is none of",", or two bounds for ",[181,189,190],{},"is between",[40,192,193,196,197,53,200,53,203,64,206,124],{},[32,194,195],{},"Blocked actions",": ",[32,198,199],{},"Create",[32,201,202],{},"Read",[32,204,205],{},"Edit",[32,207,208],{},"Delete",[14,210,211,214,215,218],{},[32,212,213],{},"Add restriction"," adds a line. ",[32,216,217],{},"Remove"," deletes one.",[25,220,222],{"id":221},"limiting-a-role-to-some-records","Limiting a role to some records",[14,224,225],{},"To give a group authority over some records and not others:",[227,228,229,236],"ol",{},[40,230,231,232,124],{},"Tag those records, for example ",[233,234,235],"code",{},"north",[40,237,238,239,242,243,246,247,249],{},"Give the group's role a restriction on the ",[32,240,241],{},"tags"," field, with the comparison ",[32,244,245],{},"is not"," and the value ",[233,248,235],{},", blocking the actions you want kept to those records.",[14,251,252,253],{},"The line then reads the other way round: ",[181,254,255],{},"So members can read only Feature records where tags is north.",[14,257,258,259,261,262],{},"Each role a person holds narrows further. Two such roles leave only the records carrying both tags. To cover two areas with one role, use ",[32,260,186],{}," with both tags: ",[181,263,264],{},"So members can read only Feature records where tags is one of north, east.",{"title":266,"searchDepth":267,"depth":267,"links":268},"",2,[269,270,271,272],{"id":27,"depth":267,"text":28},{"id":92,"depth":267,"text":93},{"id":133,"depth":267,"text":134},{"id":221,"depth":267,"text":222},"The Roles window, reading a role's restrictions as sentences, writing a restriction, and limiting a role to some records with a tag.","md",{},true,"\u002Fguides\u002Fen\u002Fuser\u002Fadmin\u002Froles",{"title":5,"description":273},"guides\u002Fen\u002Fuser\u002Fadmin\u002Froles","AI1XRFLsCP32PoPUJEFaLUeoXkhVvcXyBJWVKPRJA1U",1793063522394]