Creator roles are named permission sets that control what Creators can view, create, edit, and delete in the Unqork IDE. Creator Role Administration is organized into the following sections: Environment Roles for environment-level resource access, and Workspace Permissions for individual workspace access.
Important: Managing Creator roles requires administrative permissions. Administrators needing access should contact their environment administrator.
Environment Roles
Environment roles are named permission sets assigned to Creator accounts. Each role defines which resource types a Creator can access and what actions they can perform on those resources.
Role List
The Environment Roles tab lists all Creator roles in the environment. Each row shows the role name and description.
Page Actions
| Action | Description |
|---|---|
| Add Role | Opens a new page to create a new Creator role. |
Role Actions
Click the actions menu on any row to access the available actions.
| Action | Description |
|---|---|
| View | Opens a read-only view of the role's permission matrix. Available on all roles. |
| Edit | Opens the role form to update its name, description, or permissions. Not available on built-in roles. A Delete Role button is available on the edit page for non-built-in roles. |
Default Roles
Every environment includes the following roles by default:
| Role | Edit Action Available |
|---|---|
| Administrator | No |
| contributor | Yes |
| Viewer | Yes |
| Environment:BASIC | No |
Administrator and Environment:BASIC are built-in roles. They cannot be edited or deleted.
Role Capabilities
Each default role grants a different level of access to the IDE and its administrative features.
Administrator: Full access to all resource types across the environment, plus administrative capabilities not available to other roles. Administrators can manage Creator accounts and roles, configure environment settings, access services and certificates, and use the refer string API to generate authentication tokens. Assign this role only to Creators who need to manage the environment, not just build in it.
Contributor: Create, edit, and delete access to resources in the workspaces where they belong. Contributors cannot access administration pages or environment-level configuration. Contributor is the standard role for active Creators building applications.
Viewer: Read-only access to workspace resources. Viewers cannot create, edit, or delete anything. Use this role for Creators who need to review or reference work without making changes.
Environment:BASIC: A restricted role with no resource permissions. Creators with this role can log in to the IDE but cannot view, create, edit, or delete applications, modules, services, styles, or any other resource type. Use this role to give a Creator login access without granting them access to any environment content.
Permission Matrix
Each Creator role defines permissions across a set of resource types. Permissions are granted per action. Selecting a higher-privilege action automatically selects its prerequisites.
| Permission Area | Description |
|---|---|
| Application | Access to applications and modules. |
| Managed Assets | Access to managed asset packages. |
| Document Templates | Access to PDF document templates. |
| Data Collections | Access to reference data collections. |
| Services | Access to configured services. |
| Style | Access to style sheets and CSS configurations. |
| Data Models | Access to data model definitions. |
Each permission area supports the following actions:
| Action | Prerequisites | Description |
|---|---|---|
| View | None | Read-only access to the resource. |
| Update | View | Ability to edit existing resources. |
| Create | View, Update | Ability to create new resources. |
| Delete | View, Update, Create | Ability to delete resources. |
| Promote | View | Ability to promote resources between environments. Not available for all resource types. |
Note: Promote is not available for Document Templates, Managed Assets, or Services.
Workspace Permissions
The Workspace Permissions tab is a reference for what each workspace permission level permits. Workspace permissions are additive to a Creator's environment role. Select any permission level to see a detailed breakdown of its capabilities.
Assigning a workspace permission level to a Creator is done in Creator (User) Administration.
| Workspace Role | Description |
|---|---|
| Can Manage | Full access to all workspace content. Creators can view, create, edit, delete, and promote applications, workflows, modules, and data collections. They can also update workspace settings and manage services and data models. |
| Can Edit | Creators can view, create, edit, and delete workspace content but cannot promote it. They can manage data models and view library elements shared with the workspace. |
| Can View | Read-only access to workspace content. Creators cannot modify, promote, or delete anything in the workspace. |
| No Access | No access to workspace content. Use No Access to restrict a Creator whose environment role otherwise grants access to all workspaces. |
Changelog
| Date | Change |
|---|---|
| — | Initial publication. |