Asset Roles

Asset Roles

An asset role is a named preset of folder- and asset-level rights. You define a role once and then apply it wherever you need that combination, instead of configuring the same rights by hand every time.

The two halves live in different places. You define and manage asset roles in User Management. You apply them in the Assets module, on a specific folder or asset, through Set Rights.

Asset Roles are not the same as User Roles. User Roles bundle user-level rights (module-wide abilities such as Access Assets or Add to Compare+). Asset Roles bundle folder- and asset-level rights (View, Upload asset, Download, and so on) and are applied per folder or asset.

Defining asset roles in User Management

The Asset Roles section in User Management lists every existing role by name. This section is only accessible to users with the Manage Asset Roles right.

Creating or editing a role

Name the role and configure its rights. The full set of folder- and asset-level rights is presented with three-state toggles (Allow / Deny / Not Set), the same states used in Set Rights. Watch (folder) and Export metadata are not included, those are global user-level rights. There is no Assets Access tab on an asset role, that tab is specific to user roles. Changes are staged and take effect once you save.

Deleting a role

If the role is currently assigned anywhere, deletion is blocked, and a warning lists every asset where it's still assigned so you know what to reassign first. If it isn't assigned anywhere, deleting it removes it from User Management and from the list of roles available in Set Rights.

Applying asset roles in the Assets module

Asset roles are applied from the Set Rights panel on a folder or asset, not from User Management. You can only apply a role that contains rights you hold yourself on that folder or asset. See Set Rights on folders and assets.

Manage Asset Roles only gates access to the management section in User Management, creating, editing, and deleting roles. It does not gate whether a role can be applied in Set Rights. Applying a role is controlled entirely by the Set asset rights right on the specific folder or asset. A user can hold Set asset rights without Manage Asset Roles and still apply existing roles; they just can't create new ones.

  • Set Rights on folders and assets

  • Asset rights reference