Access Roles | CERF Online Help

Access roles are defined by permitted actions (e.g., print), which in turn are classified as action types (e.g., view Resource) in a CERF ontology. The roles are labeled in a hierarchy of increasing permissions, with Resource Identifier having the fewest permissible actions: Resource Identifier, Guest, Digital Signer, Annotator, Metadata Editor, File Cabinet Editor, Notebook Editor, File Cabinet Manager, Notebook Creator. The right-click menus are configured for your role in the Workgroup that owns the selected Resource; thus the options will include only actions permitted for your access role and that are available for the Resource type.

The chart shows the access roles as defined in the current ontologies in CERF. Note that the labels or privileges shown here may be customized for your organization. As explained below, permissions for the roles of Metadata Editor, File Cabinet Editor, and File Cabinet Manager are different in the context of Notebooks File Cabinets.

Access Role	Privileges
Resource Identifier	Able to see the title of Resources in a CERF File Cabinet, Search Results, or in the Version History list. May not view contents of a Resource. There is no right-click menu, and this user cannot create File Cabinets, set access level on Resources, submit Resources, export Resources, edit, or sign Resources.
Guest	Same privileges as Resource Identifier plus the privilege of viewing Resources as read-only copies. The right-click menu for a user with the role of Guest includes View Resource, View Resource Info, and Copy (but there are no Paste Options).
Digital Cosigner	Same privileges as Guest plus the ability to Cosign a Resource (may not initiate signing because this user is not permitted to be a Resource contributor). Cosigning requires that the Resource be accessible by the initial signer and cosigner and that the cosigner be a member of the initial signer’s Signature Workgroup.
Annotator	The same privileges as Digital Signer plus the ability to add annotations to Resources. (Annotators may also copy and paste as a relation)
Metdata Editor	In the context of a File Cabinet, a Metadata Editor has the same privileges as Annotator plus the ability to edit metadata. Note that metadata editors can put a resource under version control and can make it final. In the context of a Notebook, this role is the same as Annotator.
File Cabinet Editor	In the context of a File Cabinet, a File Cabinet Editor has the same privileges as a metadata editor and can also edit a Resource, version a Resource, add a Resource to a File Cabinet (required to initiate signing), and remove a Resource. A File Cabinet Editor can also copy and paste as a new resource or version. In the context of a Notebook, this role has the same privileges as Annotator.
Notebook Editor	In the context of File Cabinets, a Notebook Editor has the same privileges as a File Cabinet Editor. In the context of Notebooks, a Notebook Editor can add resources and edit them, save manual sort order in Flexible Notebooks, and rename Notebooks.
File Cabinet Manager	In the context of File Cabinets, a File Cabinet Manager has the same privileges as a File Cabinet Editor and can also create File Cabinets, delete a Resource (if policy permits), archive, and set resource access. A File Cabinet Manager can also save the Sort order for a Folder. In the context of a Notebook, this role is the same as Annotator.
Notebook Creator	In the context of File Cabinets, a Notebook Creator has the same privileges as File Cabinet Manager. In the context of Notebooks, a Notebook Creator has the same privileges as a Notebook Editor and can create Notebooks if business policy allows users to create Notebooks.