Security: Roles and Capabilities

To view the currently defined roles and assigned capabilities

Click Admin in the main menu.
Click the Security option and select Roles from the drop-down list. The Roles window opens.

The three predefined roles are listed on the Roles window. The table below describes the associated capabilities.

Role	Capabilities
SeniorAdmin	Full access. Includes SysAdmin, SecAdmin, TrackAdmin, TrackView, SubmitDoc, ListDoc, ViewDoc, ModifyDoc, ModifyDocOther, ModifyDocAny, DeleteDoc, DeleteDocOther, DeleteDocAny, ListDest, AddDest, ModifyDest, and DelDest. NOTE: During installation or an upgrade from a previous version, the EasySpooler administrator is set up as a user with the SeniorAdmin role.
Admin	Full access to all destinations or a list of destinations. Includes SubmitDoc, ListDoc, ViewDoc, ModifyDoc, ModifyDocOther, DeleteDoc, DeleteDocOther, ListDest, AddDest, ModifyDest, and DelDest.
User	Can submit documents, view documents, and modify documents. Includes SubmitDoc, ListDoc, ViewDoc, ModifyDoc, DeleteDoc, ListDest.

Click +Add Role to add a new role or click the select icon to the right of the role you want to view or change. The Add/Change Role window opens.
When finished click OK on the Add/Change Role window. See the table below for guidance.

The capabilities listed on the Add/Change Role window are specific to destination and document access. You cannot change the definition of a capability. The capabilities are described in the table below.

Capability	Definition
The following list of capabilities describes each option in the Destination capabilities section.
ListDest	Ability to view destinations and their properties.
AddDest	Ability to add a destination. NOTE: When you select AddDest, EasySpooler automatically checks ModifyDest too because these two capabilities often go together. If you want to select AddDest only, you can uncheck ModifyDest.
ModifyDest	Ability to change the properties of destinations.
ManageDest	Ability to change some of the properties of destinations (detach and attach, change the form, change the page that is printing).
DelDest	Ability to delete a destination.
The following list of capabilities describes each option in the Document capabilities section.
ListDoc	Ability to view a list of documents for a destination.
SubmitDoc	Ability to submit documents.
SetDocOwner	Ability to specify the owner of a document.
ViewDoca	Ability to view the contents of a document if you are the owner of the document and the document’s permissions allow you to view it.
ViewDocOthera	Ability to view the contents of a document if you are not the owner and the document’s permissions allow you to view it.
ModifyDoca	Ability to change the properties of a document if you are the owner of the document and the document’s permissions allow you to change it.
ModifyDocOthera	Ability to change the properties of a document if you are not the owner of the document and the document’s permissions allow you to change it.
ModifyDocAny	Ability to change the properties of any document regardless of ownership and document permissions. NOTE: This capability is intended primarily for the senior administrator. Unlike other capabilities, it supersedes document permissions and overrides any permission definitions that use ModifyDoc or ModifyDocOther to deny document modification.
DeleteDoc	Ability to deactivate or delete an active document or delete an inactive document if you are the owner of the document and the document’s permissions allow you to change it.
DeleteDocOther	Ability to deactivate or delete an active document or delete an inactive document if you are not the owner of the document and the document’s permissions allow you to change it.
DeleteDocAny	Ability to deactivate or delete an active document or delete an inactive document regardless of ownership and document permissions.
The following list of capabilities describes each option in the Other capabilities section.
SysAdmin	Ability to access the options in the Admin menu. NOTE: A user who has the SysAdmin capability, granted either directly or through a role, will have access to all destinations. In other words, if you give a user SysAdmin capability you cannot limit that user to a list of destinations or range of destinations.
SecAdmin	Ability to access the Security options in the Admin menubc. This capability limits who can change access control and mapping. NOTE: A user who has the SecAdmin capability, granted either directly or through a role, must have that capability on all destinations. In other words, you cannot limit the capability to a list of destinations. You cannot explicitly deny this capability.
TrackAdmin	Ability to access the Track menu items. Permission to configure Track and to chart and export Track datad.
TrackView	Ability to access the Track menu items. Permission to chart and export Track data, but not to configure Track.

a. All of the capabilities related to documents except ListDoc and ModifyDocAny are affected by document permissions. For example, if you grant the ViewDocOther capability to a user, but the user attempts to view another user’s document that has vm-m-m permissions, the user with the ViewDocOther capability will not be able to see that document. See Override Document Permissions.

b. This capability is independent from the list of destinations that may be specified in the permission definition.

c. The SysAdmin capability along with the SecAdmin capability are enabled by default.

d. The TrackView capability along with the TrackAdmin capability are enable by default.

You can assign capabilities not only to create roles, but also to create permission definitions for groups and individual users. The following table shows some typical activities you many want to assign to users and indicates the capabilities that allow these activities. Note that some activities require more than one capability.

Activity	Capabilities Required
Add a destination	AddDest and ListDest
Delete a destination	DelDest and ListDest
Attach or detach a destination	ListDest and either ModifyDest or ManageDest
Change the form loaded on a destination	ListDest and either ModifyDest or ManageDest
Allow or disallow spooling on a destination	ListDest and ModifyDest
View a destination on the Destinations list and look at the destination settings	ListDest
Change the settings for a destination	ListDest and ModifyDest
View a list of the documents for a destination (Queued documents)	ListDoc
View members of a pool destination	ListDest
Add or delete pool members	ListDest and ModifyDest
Spool a document	SubmitDoc
View the contents of your own document	ListDoc and ViewDoc
View the contents of another's documents if document permissions allow it	ListDoc and ViewDocOther
View any document on the Active/Inactive Documents list and look at the document settings.	ListDoc
Change the document settings for your own document	ListDoc and either ModifyDoc or ModifyDocAny
Change the document settings for another's document when document permissions allow it	ListDoc and either ModifyDocOther or ModifyDocAny
Change the document settings for another's document when document permissions do not allow it	ListDoc and ModifyDocAny
Deactivate or Delete your own document	ListDoc and either DeleteDoc or DeleteDocAny
Deactivate or Delete another's document when document permissions allow it	ListDoc and either DeleteDocOther or DeleteDocAny
Deactivate or Delete another's document when document permissions do not allow it	ListDoc and DeleteDocAny
Hold or release your own document for processing	ListDoc and either ModifyDoc or ModifyDocAny
Hold or release another's document for processing when document permissions allow it	ListDoc and either ModifyDocOther or ModifyDocAny
Hold or release another's document for processing when document permissions do not allow it	ListDoc and ModifyDocAny
Change the destination for your own document	ListDoc, SubmitDoc, and either ModifyDoc or ModifyDocAny
Change the destination for another's document when document permissions allow it	ListDoc, SubmitDoc, and either ModifyDocOther or ModifyDocAny
Change the destination for another's document when document permissions do not allow it	ListDoc, SubmitDoc, and ModifyDocAny
Start or stop the despooler	SysAdmin
View, configure, and change security settings	SysAdmin and SecAdmin
View Track statistics	TrackView
Configure Track	TrackAdmin

For more information see, Add, Change or Delete a Role.