Default Privileges for Roles

This section describes the privileges assigned to Dimensions CM roles out of the box. The privileges are organized by role and the area the privilege affects.

For details about privilege types, see Privilege Reference.

CAUTION! Default Grant Rules for Update and Deliver Privileges
When you create a new base database or upgrade an existing installation, the default grant rules for the Update Files from Project/Stream and Deliver Files into Project/Stream privileges include the User holds any role on the product owning the object rule. As a result, there is a security issue where certain users are able to download and upload files from any project in the product including those to which they should not have access. To correct this, you must remove the User holds any role on the product owning the object rule from the grant rules for the Update Files from Project/Stream and Deliver Files into Project/Stream privileges.

Change Manager

Product:

- Override Process Checks

Request:

- Create

- Prime

- Browse

- Delete

- Update Attachments

- Update Request

- Add Action Description

- Edit Action Description

- Delegate

- Action to Any State

- Action to Next State

- Add/Edit Detailed Description

- Move

- Perform Replication Operations

- Relate Request to Request

- Relate Request to Design Part

- Relate Request to Item

- Relate Request to Baseline

Deleter

No default privileges assigned

Deploy-Manager

Baseline

- Deploy to Any Stage

- Deploy to Next Stage

Request

- Deploy to Any Stage

- Deploy to Next Stage

Item

- Deploy to Any Stage

- Deploy to Next Stage

Dev

Item

- Revise Item Content

Developer

No default privileges assigned

Network-Administrator

No default privileges assigned

Parts-Controller

Design Part

- Create

- Delete

- Update

- Relate Design Part to Design Part

- Rename

- Suspend

Privilege Manager

Process Management

- Manage Privileges

Product Manager

Product

- Delete

- Update

- Rename

- Manage Libraries

- Manage Object Types

- Assign Roles to Users And Groups

- Refresh Inboxes for All Users

- Perform Mover Deployments

- Run Reports

- Override Process Checks

- Manage Validsets

- View Other Users

- Manage Project/Stream Upload Inclusions/Exclusions

- Relate Requests to Requirement

Project/Stream

- Create Stream

- Delete Stream

Baseline

- Create

- Delete

- Update

- Rename

- Action to Any State

- Action to Next State

- Create Archive

- Delete Archive

- Transfer Baseline In

- Transfer Baseline Out

- Build from a Baseline

- Relate Baseline to Baseline

Release

- Create

- Delete

- Forward to Customer

Item

- Create

- Browse

- Delete

- Update

- Delegate

- Move Item to Another Design Part

- Suspend

- Rename

- Action to Any State

- Action to Next State

- Relate Item to Item

- Relate Item to Design Part

- Revise Item Content

- Archive

Project Access

No default privileges assigned

QA

No default privileges assigned

Reader

No default privileges assigned

Reg

No default privileges assigned

Release-Manager

No default privileges assigned

Reviewer

No default privileges assigned

Team-Leader

Project/Stream

- Create Project

- Rename Item Filenames

- Create Directories

- Delete Directories

- Rename Directories

- Attach Project as Sub Project

- Relate Requests to Project/Stream

Design Part

- Create

Request

- Update Attachments

- Update Request

- Delegate

- Action to Any State

- Action to Next State

- Add/Edit Detailed Description

- Relate Request to Request

- Relate Request to Design Part

- Relate Request to Item

TTDim

Request

- Relate Request to Request

- Relate Request to Baseline

Valid-Set-Manager

Product

- Manage Validsets

Workset-Manager

Project/Stream

- Create Project

- Assign Deployment Areas to Project/Stream

- Action to Any State

- Action to Next State

- Delete Project

- Update

- Lock

- Bypass Locked Project/Stream

- Rename

- Add Item revisions to Project

- Remove Item revisions from Project

- Rename Item Filenames

- Create Directories

- Delete Directories

- Rename Directories

- Build from a Project/Stream

- Audit a Project/Stream

- Populate an Area from a Project/Stream

- Attach Project as Sub Project

- Attach Baseline as Sub Project

- Relate Requests to Project/Stream

- Update Files from Project/Stream

- Deliver Files into Project/Stream

- Change CM Rules for Project/Stream

- Import Request into Project

- Create Stream

- Delete Stream

Baseline

- Update Files from Baseline

Writer

No default privileges assigned

Related Topics

Privilege Rules

Managing Privileges