Who is this article for?

Administrators and Module Developers who are tasked with overseeing and managing various components.

Defined responsibilities and elevated access required.

Roles are designed to provide access rights to various applications or modules, thereby enhancing the overall functionality and user experience. Subscriber roles are not limited to a specific group of users.

Instead, both administrators and regular users can be assigned these roles, which adds a layer of flexibility to the system's access management.

User Administrators play a crucial role in this process, as they possess the capability to monitor and manage the modules that are associated with each subscriber role. This oversight is facilitated using the Subscriber Roles admin screen.

By utilizing this screen, User Administrators can ensure that access rights are appropriately assigned and adjusted as necessary, thereby promoting better governance and security across the various applications within the system.

Role Properties

• Allow User Administrators to modify: Indicates this role can be granted to other users by administrators who have the User Administrator role.
• Allow access to UsersAPI: This role grants access to allow module configuration (DXL) to add or remove access to the roles listed in the Roles Available in UsersAPI region. This setting is typically only modified by a Module Developer when setting up the Person module to automatically grant or remove roles via the UsersAPI.
• Allow access to TeamsAPI: This role grants access to allow module configuration (DXL) to add or remove access to teams via the TeamsAPI. This setting is typically only modified by a Module Developer when setting up the Teams module.

Assigning an administrative role
User Administrators cannot grant any administrative roles to users. These limitations are defined and managed by User Access Control Administrators.

The Where Used region in the bottom right-hand corner shows which modules the selected role has been used in.

Subscriber roles provide access to specific module data. While an unlimited number of subscriber roles can be created, there are three distinct types.

• Participant: Typically, all users receive the participant role. Users with this role can see all records, but only open, modify, and advance records assigned to them.
• Coordinator: A Coordinator can typically open, modify, and advance records assigned to others.
• Administrator: An Administrator can typically re-open closed items and edit data such as picklist values.

Roles are used in a module to define module rules and behaviors such as whether a field is required or if it should be hidden (invisible). These rules and behaviors are identified during the initial configuration of an application. See the roles section of the Module Developer Guide for more information.

Changes to module roles
All new roles created are subscriber roles. Module-based roles are being deprecated.