Permissions
From SAP Enable Now Wiki
This page provides a complete list of the permissions available in SAP Enable Now, and explains their purpose. Permissions can be assigned at the Organizational Unit, Role, or User level.
Permission | Provides the following capabilities |
---|---|
Content: Cancel Editing | Cancel editing for a Content Object (via Manager). |
Content: Change Workflow | Remove or change the Workflow Process assigned to a Content Object. |
Content: Comment | Enter a Comment for a Content Object (this feature has been removed). |
Content: Create | Create new Content Objects. |
Content: Delete | Delete a Content Object (move it to Trash). |
Content: Delete from Trash | Delete a Content Object from Trash. Note that to completely empty the trash, the permission Resources: Delete from Trash also needs to be assigned. |
Content: Edit | Edit existing Content Objects (Start Editing; Finish Editing). |
Content: Publish | Set the Published tag for a Content Object. |
Content: Upload Active Content | Upload files to the Workarea that could contain 'executable' code (such as JavaScript). Note that the Forbid Active Content setting should be disabled if this permission is granted. |
Content: View | Display Content Objects (all Learners must at least have this). |
Course Assignments: Edit | Create or change Assignments (of courses/Content Objects to users/OUs). |
Course Assignments: View | Display existing course assignments. |
Editing Report: View | Generate the Editing Report, which shows which Content Objects are checked out to which users. |
Messages: Create & Send | Send Broadcast Messages to users (for an OU or individual user(s)). |
Milestones: Delete | Delete an existing Milestone definition. |
Milestones: Edit | Create and change Milestones. |
Milestones: View | Display the list of existing Milestones. |
Organizational Units: Create | Create new Organizational Units. |
Organizational Units: Delete | Delete existing Organizational Units. |
Organizational Units: Edit | Change existing Organizational Unit definitions. |
Organizational Units: View | Display the current Organizational Unit hierarchy. |
Permissions: Edit | Change the permissions currently assigned to a user or role. |
Permissions: View | Display the permissions currently assigned to users and roles. |
Priorities: Delete | Delete existing Priority (Master Data) definitions. |
Priorities: Edit | Create or change current Priority (Master Data) definitions. |
Priorities: View | Display the list of current Priority (Master Data) definitions. |
Resources: Comment | Enter comments for a Resource object. |
Resources: Delete | Delete a Resource object. |
Resources: Delete from Trash | Permanently delete a Resource object. |
Resources: Publish | Publish a Resource object. |
Resources: View | View Resources. All Learners and above should have this permission. |
Roles: (De)Activate | Activate and deactivate Roles. |
Roles: Administrate All | Create and change Role definitions (over and above just their permissions). |
Roles: Delete | Delete existing Role definitions. |
Roles: Edit | Create and change existing Role definitions. |
Roles: View | Display existing Role definitions |
Scheduler: Edit Jobs | Create and edit scheduled jobs for periodically generating reports. |
Scheduler: View Jobs | Display the list of currently-scheduled jobs (to periodically generate reports). |
Server Statistics: View | Use menu option Administration > Server Statistics in Manager. |
Server: Edit Server Settings | Use menu option Administration > Server Settings to maintain server settings (note there is no 'read only' equivalent permission). |
Server: Housekeeping Edit | Run housekeeping tasks (via Manager menu option Administration > Server Housekeeping). |
Server: Housekeeping View | In theory, this should let you view any housekeeping settings, but there aren't any - only the ability to run housekeeping tasks, and this is covered by the Server: Housekeeping Edit permission. |
Server: User Import | Import new Users via file upload. |
Status Report: View | Generate the Status Report, which lists all Tasks, by Status. |
Status: Delete | Delete an existing Status (Master Data) definition. |
Status: Edit | Change an existing Status (Master Data) definition. |
Status: View | Display the list of existing Status (Master Data) definitions. |
Tags: Create | Create new Tag (Master Data) definitions. |
Tags: Delete | Delete existing Tag (Master Data) definitions. |
Tags: Edit | Create or change existing Tag (Master Data) definitions. |
Tags: Set | Apply Tags to content objects (excludes the 'Published' tag). |
Tasks: Delete | Delete a manually-created Task. |
Tasks: Edit | Create manual tasks, and edit existing Tasks. |
Tasks: View | Provides access to the options My Tasks and All Tasks on the Tasks menu in Manager (note that the sub-items Editing Report and Status Report have their own permissions). |
Test Data Creation: Generate Session ID | Required for automated server tests. Should not be assigned to any role unless explicitly instructed by SAP (and then probably only for a strictly limited time). |
Types: Delete | Delete existing Task Type (Master Data) definitions. |
Types: Edit | Create and change existing Task Type (Master Data) definitions. |
Types: View | Display the list of existing Task Type (Master Data) definitions. |
User List: View | Display users in any picklists in Manager or Producer. This permission must be granted to all roles that have a need to display or select a user (which is effectively everything except Learner and Anonymous). |
User Profile: Edit | Edit your own User Profile in Manager (menu option Settings > User Info > User Settings). |
User Profile: View | Display your own User Profile in Manager (menu option Settings > User Info > User Settings). |
User: View Details | Display personal details for users (only applicable if the data protection feature is activated). |
User: Delete Details | Purge a user's data (only applicable if the data protection feature is activated); this is done via a hover-over link in the User List. |
Users: Create | Manually create Users (typically not done if SSO is active). |
Users: Edit | Edit User information (including role assignments) for manually-created users (all information except Roles cannot be changed for imported users). |
Users: View | Display the list of Users via Manager menu option Administration > Users (menu option not visible if permission not granted). |
Users: (De)Activate | Activate and deactivate individual Users. |
Views: Authoring View | Access the 'authoring' (and administration) interfaces in Manager and Producer. This permission must be granted to all 'non-Learner) roles. Note that access to individual functions within these interfaces is typically controlled by separate permissions. |
Views: Learner View | Access the Learner view in Manager. If SAP Enable Now is used as an LMS and users will access courses directly from Manager, this permission should be granted to all roles. |
Workarea Manager | Access to the Workareas menu in Manager. This is necessary to allow developers/administrators the ability to select a Workarea. |
Workareas: (De)Activate | Activate and deactivate individual Workareas. |
Workareas: Create | Create new Workareas. |
Workareas: Delete | Delete existing Workareas. |
Workareas: Edit | Change the details of existing Workareas - including name/description, and assigning tags and Workflow processes (but not permissions - see Workareas: Edit Workarea Permissions) |
Workareas: Edit Workarea Permissions | Change the permissions for an existing Workarea. |
Workflow: Create | Define a new Workflow process. |
Workflow: Delete | Delete an existing Workflow process definition. |
Workflow: Edit | Change an existing Workflow process definition. |
Workflow: View | Display a Workflow process definition in Manager. Also necessary to be able to see/select a Workflow process for a Task. |