Story: Setting roles and permissions

Narrative
- Sample roles
- Permissions
Estimated time to implement the story
Common questions to ask to clarify requirements
Requirements addressed
Implementation overview
Team members
Best practices/tips and tricks

Narrative

Roles and permissions are used to determine which users can perform particular actions in the correspondence management system. After the Correspondence Management Solution Accelerator is installed, a System Administrator configures roles and permissions for all users who use the correspondence management solution.

The System Administrator uses User Management to configure roles and permissions. LiveCycle ES2.5 contains many pre-defined system permissions. The Correspondence Management Solution Accelerator (specifically, the Asset Manager building block) authorizes specific actions by requiring a user to have a permission that maps explicitly to that task.

System permissions are not assigned directly to users. System permissions are added to roles, and then roles are assigned to users and groups. The Correspondence Management Solution Accelerator includes some sample roles. You can use these roles in your organization, edit them to suit your purposes, or delete them and create new roles.

View full size graphic

Role Management page in User Management

Sample roles

The following sample roles and users are created when you install the Correspondence Management Solution Accelerator:

Role name	Description	Assigned to
Correspondence Management Administrator	Users with this role are assigned all permissions related to Correspondence Management, including the ability to modify and delete data dictionaries, and to define categories	System Administrator (Todd Goldman)
Correspondence Management Application Specialist	Users with this role can create, update, view, and delete assets, (including letter templates)	Application Specialist (Caleb Lopez)
Correspondence Management Claim Adjustor	Users with this role have the CM Letter Template Submit permission, which enables them to create letters for customers	Claims Adjuster (Gloria Rios)
Correspondence Management Developer	Users with this role can create, update, view, and delete data dictionaries	Middleware Developer (Frank Kricfalusi)
Correspondence Management Form Designer	Users with this role can upload layouts to the Correspondence Management system, and also activate, copy, delete, edit, and view them.	Form Designer (Jocelyn Robinson)
Correspondence Management Subject Matter Expert	Users with this role can create, update, view and delete images and text	Subject Matter Expert (Heather Douglas)

Permissions

The following permissions are created when you install the Correspondence Management Solution Accelerator:

Permission	Enables the user to	Person who typically gets this permission
CM Category Create	Create Correspondence Management categories	System Administrator
CM Category Delete	Delete Correspondence Management categories	System Administrator
CM Category Edit	Edit Correspondence Management categories	System Administrator
CM Category View	View Correspondence Management categories	Application Specialist, SME, System Administrator
CM Condition Activate	Activate Correspondence Management conditions	SME, System Administrator
CM Condition Copy	Copy Correspondence Management conditions	SME, System Administrator
CM Condition Create	Create Correspondence Management conditions	SME, System Administrator
CM Condition Delete	Delete Correspondence Management conditions	SME, System Administrator
CM Condition Edit	Edit Correspondence Management conditions	SME, System Administrator
CM Condition View	View Correspondence Management conditions	Application Specialist, SME, System Administrator
CM Data Dictionary Create	Create a data dictionary	Developer, System Administrator
CM Data Dictionary Delete	Delete a data dictionary	Developer, System Administrator
CM Data Dictionary Edit	Edit a data dictionary	Developer, System Administrator
CM Data Dictionary View	View a data dictionary	Developer, Application Specialist, SME, System Administrator
CM Image Activate	Activate images	SME, System Administrator
CM Image Copy	Copy images	SME, System Administrator
CM Image Create	Upload images	SME, System Administrator
CM Image Delete	Delete images	SME, System Administrator
CM Image Edit	Edit images	SME, System Administrator
CM Image View	View images	Application Specialist, SME, System Administrator
CM Layout Activate	Activate layouts	Form Designer, System Administrator
CM Layout Copy	Copy layouts	Form Designer, System Administrator
CM Layout Create	Upload layouts that were created in LiveCycle Designer 9.5	Form Designer, System Administrator
CM Layout Create	Upload layouts that were created in LiveCycle Designer 9.5	Form Designer, System Administrator
CM Layout Delete	Delete layouts	Form Designer, System Administrator
CM Layout Edit	Edit layouts	Form Designer, System Administrator
CM Layout View	View layouts	Form Designer, Application Specialist, SME, System Administrator
CM Letter Activate	Activate letter templates	Application Specialist, System Administrator
CM Letter Copy	Copy letter templates	Application Specialist, System Administrator
CM Letter Create	Create letter templates	Application Specialist, System Administrator
CM Letter Delete	Delete letter templates	Application Specialist, System Administrator
CM Letter Edit	Edit letter templates	Application Specialist, System Administrator
CM Letter PreviewWithTestData	Preview letter templates with test data	Application Specialist, System Administrator
CM Letter PreviewWithoutData	Preview letter templates without test data	Application Specialist, System Administrator
CM Letter Submit	Submit letters	Claims Adjuster, System Administrator
CM Letter View	View letter templates	Application Specialist, System Administrator
CM List Activate	Activate lists	SME, System Administrator
CM List Copy	Copy lists	SME, System Administrator
CM List Create	Create lists	SME, System Administrator
CM List Delete	Delete lists	SME, System Administrator
CM List Edit	Edit lists	SME, System Administrator
CM List View	View lists	Application Specialist, SME, System Administrator
CM System DataDictionary Create	Create a system data dictionary	Not assigned by default
CM System DataDictionary Delete	Delete a system data dictionary	Not assigned by default
CM System DataDictionary Edit	Edit a system data dictionary	Not assigned by default
CM System DataDictionary View	View a system data dictionary	Not assigned by default
CM Text Activate	Activate text	SME, System Administrator
CM Text Copy	Copy text	SME, System Administrator
CM Text Copy	Copy text	SME, System Administrator
CM Text Create	Create text	SME, System Administrator
CM Text Delete	Delete text	SME, System Administrator
CM Text Edit	Edit text	SME, System Administrator
CM Text View	View text	Application Specialist, SME, System Administrator

Estimated time to implement the story

Not applicable to this user story.

Common questions to ask to clarify requirements

Not applicable to this user story.

Requirements addressed

Provides the ability to authorize users to perform specified tasks.

Implementation overview

Follow these steps to set roles and permissions for the Correspondence Management Solution Accelerator:

If you haven’t already done so, configure one or more domains in User Management. A domain is a set of users and groups that User Management uses as a source directory for obtaining user information. The user and group information can come from a third-party storage system, such as an LDAP directory, or the users and groups can be created locally in the User Management database. (See Setting up and managing domains and Setting up and organizing users in the LiveCycle ES2 Administration Help .)
Decide what roles your organization requires, and which permissions will be assigned to each role. Keep in mind that you can assign more than one role to a user. The Correspondence Management Solution Accelerator includes some sample roles. You can use these roles in your organization, edit them to suit your purposes, or delete them and create new roles. (See Sample roles for a list of these roles, and Permissions for a list of permissions related to Correspondence Management.)
Assign the roles to users and groups. (See Change role permissions in the LiveCycle ES2 Administration Help .)

Contentspace roles

Everyone who will access the Correspondence Management system (including Form Designers, Middleware Developers, Claims Adjustors, Application Specialists, SMEs, and System Administrators) need to be assigned the LiveCycle Contentspace User role.

System Administrators also require the LiveCycle Contentspace Administrator role.

Both of these are roles are preconfigured in Adobe User Management when you install LiveCycle ES2.5. For instructions on assigning these roles to users, see Change role permissions in the LiveCycle ES2 Administration Help .

Coordinator role

When you create users as part of a new domain, you must also assign the Coordinator role to all the users so that they can access the Contentspace space DataStore:

Log in to Contentspace.
View the details of Company Home > DataStore.
In Actions, select Manage Space Users.
Select Invite.
Select group (all principles in domain <DomainName>)
Select Role: Coordinator
Click Add to List and then click Next.
Click Finish.

System Data Dictionary Administrator

By default, the user tgoldman does not have the permissions required to create a system data dictionary. To enable a user to create a system data dictionary, assign the following permissions to the user: CM System Data Dictionary Create, CM System Data Dictionary Delete, CM System Data Dictionary Edit, CM System Data Dictionary View.

You must also add the user to the System Data Dictionary Administrator group as follows:

In the LiveCycle Administration Console, click Settings > User Management > Users and Groups.
Edit the group System Data Dictionary Administrator.
Click the Child Principals tab and add the user to the group.

Team members

The System Administrator configures roles and permissions. The System Administrator must be familiar with LiveCycle Administrator, and User Management in particular.

Best practices/tips and tricks

Not applicable to this user story.