Role and permission schemas
The censhare standard workspace for dedicated solutions contains preconfigured roles and permission sets. Optionally, you can add minimum/maximum workflow states, and minimum/maximum workflow target states to each role. In the user configuration, assign a default domain and the shared and common domains with their specific roles to a user.
User roles
Solution developers
Context
Permission sets are assigned to roles. Users are assigned to a default role in their main domain, and additional roles in other domains.
Prerequisites
None
Introduction
Processes, responsibilities and functions determine, which access, editing and approval permissions users need to carry out their tasks. The preconfigured roles of the censhare Standard solutions cover most requirements of the production process and administration your assets.
The roles and permissions are stored in the Master data/ Roles and the Master data/Permission sets tables.
Permission sets and permission keys
The censhare standard workspace for dedicated solutions adds the following permission sets and respective permission keys to the master data:
Permission set | Description | Includes permission keys |
|---|---|---|
Application | Grants permissions to publishing applications (Adobe InCopy, Adobe InDesign, Adobe FrameMaker, QuarkXPress) that are part of the censhare system. | Use Adobe InCopy, |
Assets | Grants permission to open, edit, and save asset properties. | Asset relations user, |
Basic | Users can preview assets on an asset page and have access to their profile and preferences. | Asset previews, |
Create | Grants permission to create new assets, to create asset variants, to check out/check in assets, and to add or replace asset files. | Asset relations variant, |
Delete | Users with this permission set can mark assets for deletion (not physically delete assets), and remove asset content (files). | Mark assets for deletion, |
Download | Grants permission to download asset content (files). | Asset export all |
Editors | Grants permissions to editing tools (content editor, text editor, calendar editor, image editor, and others) that are part of the censhare system. | Article editor all, |
History & archive | Grants access to the asset history and asset versions. Required to restore and archive asset versions. Note: This set does not include deletion permissions. | Archive assets, |
Plan & relate | Grants permission to the planning tools of censhare (Project editor), and the related resources (Workflows, Workflow targets). This set includes the permission to create the respective asset relations. | Asset relations target, |
Properties | Grants permission to edit the generic asset properties (for example, name, description, domain, language), and specific asset properties (for example, product features) | Edit asset attributes, |
Translation | Grants permission to the translation memory and translation resources. | Translation of styles, |
Solution administration | Grants administrator permissions to applications (enable/disable, configure), administration of users and assets. | Admin all, |
System administrator | Grants all permissions. | All |
Translation | Grants permission to the translation memory and translation resources. | Translation of styles, |
Permission set assignments
Permission sets are assigned to user roles. In the censhare standard workspace for dedicated solutions, permission sets are assigned to the preconfigured user roles. Optionally, you can assign a minimum and maximum workflow state, and a minimum and maximum target workflow state to each permission set.
Role | Assigned permission sets |
|---|---|
Solution administrator | Download, |
Consumer | Basic, |
Specialist | History & archive, |
External service provider | Basic, |
Enabler | Plan & relate, |
Manager | Basic, |
Role and domain schemas
For the proper function of the censhare Standard workspace, users require access to the common resources domain, the global share and the organizational share domains. As best practice, users can also be granted read access to the default domains of the other dedicated solutions.
The censhare standard workspace for dedicated solutions does not add any users to the master data, but provides XML configuration files for dedicated test users. You can import these users for test purposes and as a blueprint for dedicated PIM, DAM, CMS and Project solutions.
Create test users
Important: The generic test users provided with censhare Dedicated Solutions are only for test purposes. Never use test users in production systems!
The configuration files of the test users are stored as Text/XML assets. The assets are part of the dedicated solution package. The assets contain only the configuration. The users themselves are not part of the dedicated solutions. This section describes how to create the test users from the configuration files.
If you cannot find the respective assets in your system, you can import the assets in the censhare Admin Client with the Synchronize Dedicated Solutions action. In the dialog, select dedicated-solutions/03_test-users and click OK to run the import.
The import creates the following assets:
Asset (resource key) | Default role (domain) | Additional roles (domains) |
|---|---|---|
censhare Media Consumer | Consumer (Media) | Consumer (Common resources) |
censhare Media Enabler | Enabler (Media) | Consumer (Common resources) |
censhare Media Manager | Manager (Media) | Consumer (Common resources) |
censhare Media Specialist | Specialist (Media) | Consumer (Common resources) |
censhare Product Manager | Manager (Product) | Consumer (Common resources) |
censhare Product Specialist | Specialist (Product) | Consumer (Common resources) |
censhare Solution Administrator | Solution admin | Solution administration |
To add a test user, do the following:
In censhare Web, search for the desired asset (you can search for the name or resource key from the table above), and open it in an asset page.
In the Files widget, click
to download the XML master file.Open the censhare Admin Client, and click
to open the Import XML files dialog.Select the test user XML file from the download folder of your computer.
In the Import XML files dialog, click
to start the import.In the import resume dialog, click OK.
Repeat the previous steps for each test user that you want to add.
Edit test users
The test users are created as censhare Master data. You can view and edit the imported test users in the Master data/Users table in the censhare Admin Client.
Create person assets from test users
In a common scenario, users are also managed as a person resource in censhare. Person resources are represented in Person assets. You can enrich person assets with further data. For example, contact data, departments, personal goals, etc.
To create person assets from the test users, in the censhare Admin Client, open the server actions menu ( 
) and select the Create person assets action. In the dialog, click OK to run the action. Person assets are created for all users, you cannot select individual users in the dialog. To access the person assets in censhare Web, open the Last created page.
Result
The preconfigured roles are ready to be used in your digital asset management solution. You know how to configure default and additional domains and roles for users.