ROCK Enterprise gives control and flexibility for organizations.
Enterprise Role and User Permissions
|
Enterprise Manager |
Creator |
User |
|
|
Manage Users |
x |
||
|
Manage Enterprise |
x |
||
|
Purchase Tokens |
x |
x |
x |
|
Create Folder |
x |
x |
|
|
View All Folders* |
x |
||
|
Modify All Folders* |
x |
||
|
Modify Own Folder (owner or editor) |
x |
x |
|
|
Modify All Projects* |
x |
||
|
Delete All Projects* |
x |
||
|
View All Projects* |
x |
||
|
Modify Own Projects (owner or editor) |
x |
x |
|
|
Delete Own Projects (only owned projects) |
x |
x |
|
|
View Own Projects (owner, editor, or viewer == “own”) |
x |
x |
x |
|
Create Project |
x |
x |
|
|
Order deliverables on projects you own |
x |
x |
x |
|
Share Own Folder (owner or editor) |
x |
x |
x |
|
Share All Folders* |
x |
||
|
Transfer Ownership |
Only Owner |
||
|
View All jobs ordered |
x |
||
|
View Own jobs ordered |
x |
x |
x |
|
View All Receipts for orders |
x |
||
|
View Own Receipts for orders |
x |
x |
x |
* - “All” in this instance means “All projects/folders within the enterprise” not “All projects on the cloud”
Access Management Examples
The roles and permissions listed above give incredible flexibility in managing Enterprise access to projects. Below are some common use-cases:
Access by department
Assume you have multiple departments within your organization and you want to give access to users within those departments to certain projects.
Manager
Department A
User 1 - Edit all projects
User 2 - View all projects
Department B
User 3 - Edit all projects
User 4 - View all projects
The Manager can set up two Folders ("Department A" and "Department B" folders). Then add User 1 and User 2 to Department A folder with edit access for User 1 and view access for user 2. The same can be setup for Department B folder with User 3 and User 4.
User 1 will now have edit access to all projects and folders that get created within Department A folder whereas User 2 will only have view access to all projects and folders under the same. However, individual project share settings can override this default folder sharing if needed.
Once Department B folder and access is setup, users form within their departments will only be able to see projects and folders under their respective departments.