Core Permissions

   Journey Manager (JM) The transaction engine for the platform.  |    System Manager / DevOps  |   21.05 This feature was updated in 21.05.

Manager provides the following permissions to control user access to restricted content. The permissions are mapped to the standard roles below, so you know what roles to assign to users to enable them to use certain product functionality.

Permission Description Role

Admin Directory

This is permission is required to access the Manager console. Users accessing the Manager console must be granted at least one role with this permission, otherwise they will not be able to use it.

System Manager

Organizarion User Manager

Transaction Data Access

Operations

System Support

Administrator

Developer

Audit View

Provides access to the system audit log and user login history.

System Manager

System Support

Administrator

Developer

Collaboration Job View

Provides read-only access to collaboration jobs, including viewing details about a collaboration job and its steps, actions and events. This permission is also found in each of the form spaces. However, it would grant different types of privileges for a form space.

System Manager

Operations

System Support

Administrator

Developer

Collaboration Job Edit

Allows users to manage collaboration jobs by pausing, triggering job processing, editing job properties and action details.

System Manager

Operations

Administrator

Developer

Collaboration Job Remove

Allows users to delete collaboration jobs. Only canceled collaboration jobs can be deleted.

System Manager

Operations

Administrator

Developer

Core Service Edit

Allows users to edit advanced service settings and some collaboration job related services. This permission is not assigned to any of the standard Manager roles, so use it with care and only when absolutely necessary. You should seek advice from the Manager support beforehand.

System Manager

Administrator

Developer

Data Retention View

Allows users to view global data retention settings.

System Manager

Operations

System Support

Administrator

Developer

Data Retention Edit

Allows users to modify and apply global data retention settings.

System Manager

Administrator

Db Version Update View

Allows users to view the database version history.

System Manager

Administrator

Delivery Details View

Allows users to view the list of delivery channels and trigger delivery actions for submissions manually.

System Manager

Operations

System Support

Administrator

Developer

Delivery Details Edit

Allows users to create, edit and delete delivery channels.

System Manager

Administrator

Developer

Delivery Details Remove

It is not currently in use, so apply the Delivery Details Edit permission instead.

System Manager

Administrator

Developer

Deployment Property View

Allows users to view the list of system deployment properties and their values.

System Manager

System Support

Administrator

Developer

Deployment Property Edit

Allows users to edit deployment property values, access and modify email settings.

System Manager

Administrator

Developer

Document Type View

Allows users to view document types and their details.

System Manager

Operations

System Support

Administrator

Developer

Document Type Edit

Allows users to create and edit document types.

System Manager

Administrator

Developer

Document Type Remove

Allows users to remove document types.

System Manager

Administrator

Developer

Email Delivery Acknowledge

It is related to delivery of type Email Secure, where administrators receive an email notifying them of new submissions, asking them to acknowledge delivery by accessing a page on Manager and confirming. This permission controls access to this page. Must be assigned to only administrators involved in processing secure email delivery.

System Manager

Operations

Administrator

Developer

Email Queue View

Allows users to access the system email queue, but does not allow them to view each email details. You need to assign the Email Queue Edit permission for that.

System Manager

Operations

Administrator

Developer

Email Queue Edit

Allows users to create, edit and access email queue details.

System Manager

Operations

Administrator

Developer

Error Log View

Provides access to the error log and error details. It also enables links to error log entries from various Manager tabs.

System Manager

Operations

Administrator

Developer

Event Log View

Provides access to the event log and event details. It also enables links to event log entries from various Manager tabs.

System Manager

Operations

Administrator

Developer

Export Application Package

Allows users to export application packages, including form bundles and services, for organizations they have access to.

System Manager

Operations

Administrator

Developer

Export Form

Allows users to export a form and all its versions.

 

Export Form Version

Allows users to export a single form version.

System Manager

Operations

Administrator

Developer

Export Groups

Allows users to export one or more groups.

System Manager

Operations

Administrator

Developer

Export Metadata

Allows users to export the set of global metadata tags.

System Manager

Operations

Administrator

Developer

Export Organization

Allows users to export an organization.

 

Export Portal

Allows users to export a form space.

System Manager

Operations

Administrator

Developer

Export Roles

Allows users to export one or more roles

System Manager

Operations

Administrator

Developer

Export Services

Allows users to export one or more service definitions.

 

Export Security Managers

Allows users to export one or more security managersSecurity managers are the Journey Manager's components that are responsible for User Authentication, User Authorization, User Self-Registration, and Session Management. Security mangers are designed to handle various sets of users requiring access to different form spaces and can be associated with one or more form spaces. Users can be external or internal, and they can require access to form spaces or a combination of form spaces and modules in different environments. You can find security managers under Security > Security Managers..

System Manager

Operations

Administrator

Developer

Form View

Allows users to view forms and most of their configuration in a read-only mode.

Displays the Recent Forms card on the Journey Manager Home Dashboard.

Enables links to forms from various Manager tabs.

Note

If you need to view form version or form data configuration details, you need to add the Form Edit permission.

System Manager

Operations

Administrator

Developer

Form Edit

Allows users to view all details about a form as well as create and edit forms. It includes editing form versions and form data configuration.

System Manager

Operations

Administrator

Developer

Form Service Edit

Allows administrators to manage service definitions related to form development. This permission is a less powerful than the Service Edit permission.

System Manager

Operations

Administrator

Developer

Form Test

This permission exposes links to access forms on a form space for testing. It also allows users to access the PDF receipt test harness, such as a link in the Form URLs section of the form edit page.

System Manager

Operations

Administrator

Developer

Form Data Retention

Allows users to edit form specific data retention settings.

System Manager

Operations

Administrator

Developer

Form Remove

Allows users to delete forms, form versions, form promotion entries and form data extract mappings.

System Manager

Operations

Administrator

Developer

Groovy Console

Allows access to the Groovy console.

System Manager

Operations

Administrator

Developer

Groovy Log View

Allows access to the Groovy service log.

System Manager

Operations

Administrator

Developer

Group View

Allows users to view the list of groups, but it does not allow access to group detail information, so you should add the Group Edit permission for that.

System Manager

Operations

Administrator

Developer

Group Edit

Allows users to create, edit and view group details.

System Manager

Operations

Administrator

Developer

Group Remove

Allows users to remove groups.

System Manager

Operations

Administrator

Developer

Group Assign

Allows users to assign users to a group. It is also necessary to access the Forms panel on the group edit page.

System Manager

Operations

Administrator

Developer

Import Action View

Allows access to the import log. It does not include read-only access to import action details.

System Manager

Operations

Administrator

Developer

Import Action Edit

Allows users to view and edit import log details . It is also necessary to import form and form space archives exported from another Manager server, along with the import permission corresponding to the entity to be imported.

System Manager

Operations

Administrator

Developer

Import Action Remove

Allows users to delete entries from the import log. Only completed import actions can be deleted.

System Manager

Operations

Administrator

Developer

Import Application Packagev

Allows users to import application packages, such as form bundles and services, for organizations they have access to.

System Manager

Operations

Administrator

Developer

Import Composer Form

Allows users to import forms published by Composer and view the import details.

System Manager

Operations

Administrator

Developer

Import Form

Allows users to import form version archives created by exporting a form version from another Manager server. to import form version archives successfully, users also currently need the Import Action Edit permission.

System Manager

Operations

Administrator

Developer

Import Groups

Allows users to import group archives created by exporting one or more groups from another Manager server.

System Manager

Operations

Administrator

Developer

Import Metadata

Allows users to import metadata tag archives created by exporting one or more metadata tags from another Manager server. In addition, this permission is needed to upload files with values for metadata tags of types List and List Hierarchy.

System Manager

Operations

Administrator

Developer

Import Organization

Allows users to import an organization archive, which contains organization configuration but no forms, exported from another Manager server. Only administrators with access to more than one organization can see the import button.

System Manager

Operations

Administrator

Developer

Import Portal

Allows users to import a space archive, which contains form space configuration but not the backing WAR file, exported from another Manager server as well as space WAR files. To import space archives successfully, users also currently need the Import Action Edit permission.

System Manager

Operations

Administrator

Developer

Import Roles

Allows users to import role archives, which contains roles and associated permissions, exported from another Manager server.

System Manager

Operations

Administrator

Developer

Import Security Manager

Allows users to import security manager archives exported from another Manager server.

System Manager

Operations

Administrator

Developer

Import Services

Allows users to import service archives, which contains service definitions and their service connections, exported from another Manager server.

System Manager

Operations

Administrator

Developer

Import TPac

Allows users to import TPacs directly into Manager.

System Manager

Operations

Administrator

Developer

Licensing Edit

Allows users to edit system licensing information and configure how licensing report data will be published to Avoka.

System Manager

Operations

Administrator

Developer

Licensing Report View

Allows users to access the Transact Licensing and Job Licensing reports, otherwise these reports don't appear in the Reports menu.

System Manager

Operations

Administrator

Developer

Metadata Tag View

Allows users to view metadata tags and their details.

System Manager

Operations

Administrator

Developer

Metadata Tag Edit

Allows users to create and edit metadata tags.

System Manager

Operations

Administrator

Developer

Metadata Tag Remove

Allows users to delete metadata tags.

System Manager

Operations

Administrator

Developer

Metadata Value View

Allows users to view values configured for metadata tags on the organization or form version levels.

System Manager

Operations

Administrator

Developer

Metadata Value Edit

Allows users to create and edit values configured for metadata tags on the organization or form version levels.

System Manager

Operations

Administrator

Developer

Metadata Value Remove

Allows users to delete values configured for metadata tags on the organization or form version levels.

System Manager

Operations

Administrator

Developer

Notification View

Allows users to view the list of notifications configured for form spaces.

System Manager

Operations

Administrator

Developer

Notification Edit

Allows users to create and edit notifications configured for form spaces.

System Manager

Operations

Administrator

Developer

Notification Remove

Allows users to delete notifications configured for form spaces.

System Manager

Operations

Administrator

Developer

Offline Sync Log View

Allows users to view the T.Field related offline sync and client logs.

System Manager

Operations

Administrator

Developer

Operation Chart View

Allows users to view a number of Manager analytics charts.

System Manager

Operations

Administrator

Developer

Operation Export Report View

Not used.

System Manager

Operations

Administrator

Developer

Operation Form Events View

Not used.

System Manager

Operations

Administrator

Developer

Organization View

Allows users to view organization information and part of its configuration. It also enables links to organizations.

System Manager

Operations

Administrator

Developer

Organization Edit

Allows users to create and edit organizations and associated configuration, such as categories and application packages.

System Manager

Operations

Administrator

Developer

Organization Remove

Allows users to remove organizations. Because deleting organizations will also delete all associated forms and submissions, this is a permission that should be assigned sparingly.

System Manager

Operations

Administrator

Developer

Organization Copy

Allows users to create a copy of an existing organization.

System Manager

Operations

Administrator

Developer

Organization Portal Assign

Allows users to assign spaces to an organization for form hosting purposes.

System Manager

Operations

Administrator

Developer

Organization Payment Edit

Allows users to view and modify an organization's payment gateway.

System Manager

Operations

Administrator

Developer

Organization Property View

Allows users to view the set of organization property values.

System Manager

Operations

Administrator

Developer

Organization Property Edit

Allows users to edit and delete organization property values.

System Manager

Operations

Administrator

Developer

Organization Property Remove

Not used.

The edit permission confers deletion privileges.

System Manager

Operations

Administrator

Developer

Organization Storage Edit

Allows users to edit organization data storage and retention settings.

System Manager

Operations

Administrator

Developer

Payment Log View

Allows users to view payment transactions.

System Manager

Operations

Administrator

Developer

Portal View

Allows users to view details of form spaces and modules.

System Manager

Operations

Administrator

Developer

Portal Edit

Allows users to edit form spaces, modules and all associated configurations.

System Manager

Operations

Administrator

Developer

Portal Content Edit

Allows users to edit form space content, such as pages and resources.

System Manager

Operations

Administrator

Developer

Portal Style Edit

Allows users to edit some form space content related to styling, such as the index page, childportal.css and all resources of JPG type.

System Manager

Operations

Administrator

Developer

Portal Remove

Allows users to remove form spaces and modules.

System Manager

Operations

Administrator

Developer

Promotion View

Allows users to view the form version promotions and a tab on the form edit page.

System Manager

Operations

Administrator

Developer

Promotion 1 Development

Allows users to promote form versions to be in the Development status.

System Manager

Operations

Administrator

Developer

Promotion 2 Ready For Test

Allows users to promote form versions to be in the Ready For Test status.

System Manager

Operations

Administrator

Developer

Promotion 3 Test Failed

Allows users to promote form versions to be in the Test Failed status.

System Manager

Operations

Administrator

Developer

Promotion 4 Test Passed

Allows users to promote form versions to be in the Test Passed status.

System Manager

Operations

Administrator

Developer

Promotion 5 Ready For Production

Allows users to promote form versions to be in the Ready For Production status.

System Manager

Operations

Administrator

Developer

Promotion 6 Not Ready For Production

Allows users to promote form versions to be in the Not Ready For Production status.

System Manager

Operations

Administrator

Developer

Promotion 7 Production

Allows users to promote form versions to be in the Production status.

System Manager

Operations

Administrator

Developer

Property Type View

Allows users to view property types.

System Manager

Operations

Administrator

Developer

Property Type Edit

Allows users to create and edit property types

System Manager

Operations

Administrator

Developer

Property Type Remove

Allows users to remove property types.

System Manager

Operations

Administrator

Developer

Report View

Allows users to view reports, but it does not give read-only access to report configuration details, so you should add the Report Edit permission for that.

System Manager

Operations

Administrator

Developer

Report Edit

Allows users to create and edit reports.

System Manager

Operations

Administrator

Developer

Report Remove

Allows users to remove reports.

System Manager

Operations

Administrator

Developer

Report Render

Allows users to render reports on screen and access the organization report schedules.

System Manager

Operations

Administrator

Developer

Report Schedule View

Allows users to view report schedules on the organization level.

System Manager

Operations

Administrator

Developer

Report Schedule Edit

Allows users to create and edit report schedules on the organization level.

System Manager

Operations

Administrator

Developer

Report Schedule Remove

Allows users to remove report schedules on the organization level.

System Manager

Operations

Administrator

Developer

Report Schedule Trigger

Allows users to trigger report schedules on the organization level that send an email for the most recent reporting period.

System Manager

Operations

Administrator

Developer

REST Delivery Service API

Allows users to invoke the REST Delivery API provided in Manager.

System Manager

Operations

Administrator

Developer

REST Fluent API

Allows users to invoke Fluent API via the REST service provided in Manager.  |  21.05 This feature was introduced in 21.05.

Administrator

REST Service Definitions API

Allows users to invoke the REST Service Definitions API provided in Manager.

System Manager

Operations

Administrator

Developer

REST Application Package API

Allows users to access the Application Package REST service endpoint for listing application packages, and importing and exporting application packages in Manager.

System Manager

Operations

Administrator

Developer

REST Form Groups API

Allows users to access the Form Groups REST service endpoint for querying and creating Form Groups in Manager.

System Manager

Operations

Administrator

Developer

REST Groovy Service Invoke

Allows users to access the Groovy Service REST service endpoint to invoke a Groovy service. This service endpoint can be used to perform operations such as uploading reference data for use in dynamic data or form prefill services. Enable the service parameter REST Invoke Enabled service parameter.

System Manager

Operations

Administrator

Developer

REST Tasks API

Allows users to access the Tasks API REST service endpoint for creating and updating tasks in Manager in a secure and efficient manner.

System Manager

Operations

Administrator

Developer

REST Test Center API

Allows users to access the TestCenter API REST service endpoint for performing test operations in Manager.

System Manager

Operations

Administrator

Developer

REST Transaction History API

Allows users to access the Transaction History API REST service endpoint for querying the OLAP Transaction History table in a secure and efficient manner.

System Manager

Operations

Administrator

Developer

REST TPac API

Allows users to access the TPac API REST service endpoint for deploying TPacs, and downloading or deleting TPac archive files in Manager.

System Manager

Operations

Administrator

Developer

REST Transactions API

Allows users to invoke the REST Transactions API provided in Manager.

System Manager

Operations

Administrator

Developer

Role View

Allows users to view roles, but it does not give read-only access to role configuration details, so you should add the Role Edit permission for that.

System Manager

Operations

Administrator

Developer

Role Edit

Allows users to create, edit and view role details.

System Manager

Operations

Administrator

Developer

Role Remove

Allows users to remove roles.

System Manager

Operations

Administrator

Developer

Role Assign

Allows users to assign user accounts to a role. The set of roles that a user can assign is further restricted based on whether the user is a global administrator.

System Manager

Operations

Administrator

Developer

Security Manager View

Allows users to view the set of security managersSecurity managers are the Journey Manager's components that are responsible for User Authentication, User Authorization, User Self-Registration, and Session Management. Security mangers are designed to handle various sets of users requiring access to different form spaces and can be associated with one or more form spaces. Users can be external or internal, and they can require access to form spaces or a combination of form spaces and modules in different environments. You can find security managers under Security > Security Managers..

System Manager

Operations

Administrator

Developer

Security Manager Edit

Allows users to create, edit and view all details of security managers, including managing authentication providers. The Service Edit permission currently controls access to some content, such as creating security managers and authentication providers and parameters.

System Manager

Operations

Administrator

Developer

Security Manager Remove

Allows users to remove security managers.

System Manager

Operations

Administrator

Developer

Service View

Allows users view the full set of service definitions, service connections, collaboration job definitions, server nodes, and scheduled jobs in a read-only mode.

Displays the Recent Services card on the Journey Manager Home Dashboard.

Note

If you need to view services configuration details, you need to add the Service Edit permission.

System Manager

Operations

Administrator

Developer

Service Edit

Allows users to create, edit and view configuration details of service definitions, service connections, collaboration job definitions, server nodes, scheduled jobs, and system data retention settings. For a form developer to modify their own form related services, without giving them access to all service types, you should use the Form Service Edit permission instead.

System Manager

Operations

Administrator

Developer

Service Remove

Allows users to remove service definitions, service connections, collaboration job definitions, server nodes, and scheduled jobs.

System Manager

Operations

Administrator

Developer

Submission View

Allows users to view form transactions, transactions history, transaction delivery, saved transactions, abandoned transactions. It also enables links to submissions on other pages. Access to the actual content submitted by users is not granted by this permission, so you should add the Submission Data View and Submission XML Data View permissions.

 

Allows users to view form transactions, transactions history, transaction delivery, saved transactions, abandoned transactions.

Displays the Latest Transactions card on the Journey Manager Home Dashboard.

Enables links to submissions on other pages.

Note

If you need to view the actual content submitted by users, you need to add the Submission Data View and Submission XML Data View permissions.

System Manager

Operations

Administrator

Developer

Submission Edit

Allows users to modify submission statuses and retry delivery.

System Manager

Operations

Administrator

Developer

Submission Data View

Allows users to view non-XML submission content, such as receipt and attachment content, but not the submitted XML, submitted by the user. It also provides access to the set of submission data extract values, including the form submission data. Allows access to user entered data, so you must handle it carefully.

System Manager

Operations

Administrator

Developer

Submission XML Data View

Allows users to view XML submission content, that is, the data entered into the form by the user. Allows access to user entered data, so you must handle it carefully.

System Manager

Operations

Administrator

Developer

Submission XML Data Edit

Allows users to edit XML submission content and delete submission data extract values.

System Manager

Operations

Administrator

Developer

Submission Save Edit

Allows administrators to open and fill in saved transactions.

System Manager

Operations

Administrator

Developer

System Health View

Allows users to view system health.

System Manager

Operations

Administrator

Developer

System Info View

Allows users to access some pages that provide information on system info, server performance, and LiveCycle performance.

System Manager

Operations

Administrator

Developer

System Report Schedule View

Allows users to view report schedules for global reports.

System Manager

Operations

Administrator

Developer

System Report Schedule Edit

Allows users to create and edit report schedules for global reports.

System Manager

Operations

Administrator

Developer

System Report Schedule Remove

Allows users to remove report schedules for global reports, but you should also add the Report Schedule Edit permission for this to work.

System Manager

Operations

Administrator

Developer

System Report Schedule Trigger

Allows users to trigger report schedules for global reports that sends an email for the most recent reporting period.

System Manager

Operations

Administrator

Developer

Task View

Allows users to view the list of task submissions.

System Manager

Operations

Administrator

Developer

Task Edit

Allows users to create task submissions and edit related task.

System Manager

Operations

Administrator

Developer

TPac Remove

Allows users to remove imported TPacs.

System Manager

Operations

Administrator

Developer

TPac View

Allows users to view the imported TPacs.

System Manager

Operations

Administrator

Developer

User View

Allows administrators to view user accounts, but it does not include a read-only view of user details, so you should add the User Edit permission for that.

System Manager

Operations

Administrator

Developer

User Edit

Allows administrators to create, edit and view User Edit user properties.

System Manager

Operations

Administrator

Developer

User Remove

Allows administrators to remove user accounts.

System Manager

Operations

Administrator

Developer

User Bulk Import

Allows administrators to bulk import user accounts defined in an Excel spreadsheet.

System Manager

Operations

Administrator

Developer

User Profile Edit

Allows administrators to create and edit user profiles, as well as mark a profile as the default one for a user.

System Manager

Operations

Administrator

Developer

User Profile Remove

Allows administrators to remove user profiles.

System Manager

Operations

Administrator

Developer

User Property View

Allows administrators to view user properties.

System Manager

Operations

Administrator

Developer

User Property Edit

Allows administrators to create, edit and view user properties.

System Manager

Operations

Administrator

Developer

User Property Remove

Allows administrators to remove user properties.

System Manager

Operations

Administrator

Developer

Web Service Invoke

Allows users to invoke Manager's web services.

System Manager

Operations

Administrator

Developer

Next, learn how to view roles.