Documentation

Assigning Users to Roles

The location of a Role’s assignment UI corresponds with the Role’s scope.

Regular Roles

Globally scoped regular roles are available for configuration in the DXP Control Panel.

Permission Scope Available Assignments
Throughout the Virtual Instance (global) User Groups
Organizations
Sites
Segments
Individual Users

You can assign Users to a Regular Role in the Assignees tab of the Add/Edit Role form.

  1. Go to Control Panel → Users → Roles, and click on a Regular Role.

  2. In the Assignees tab of the Add/Edit Role form, click the tab for the assignment type you need. Regular Roles are assigned to Users, Sites, Organizations, User Groups, or User Segments.

  3. Click the Add button Add.

  4. Select the assignees and click Add.

    If assigning a group, all Users assigned to that group inherit the Role.

You can assign a Regular Role to an entire Organization of Users.

Site Roles

You can assign Users to a Site Role in the Memberships section of a Site’s People sub-menu.

Permission Scope Available Assignments
A single Site User Groups
Organizations
Segments
Individual Site Members
  1. Go to Site Menu → People → Memberships.

  2. Click the tab for the membership type you’re assigning the Role. Site Roles are assigned to Users (i.e., individual Site members), Organizations, or User Groups.

  3. Click the Actions button Add → Assign Roles.

  4. Choose the Roles to assign and click Done.

    If assigning a group, all Users assigned to that group inherit the Role.

Assign a Site Role within the Site Menu's People → Memberships section.

Note

As of Liferay CE 7.3.1 GA2 and Liferay DXP 7.2 SP3+, you can assign Site Roles to User Segments. See Assigning Roles to User Segments for more details.

Organization Roles

You can assign Users to a Organization Role in the Organizations tab of the Users and Organizations Control Panel section.

Permission Scope Available Assignments
A single Organization Individual Users
  1. Go to Control Panel → Users → Users and Organizations, and click on the Organizations tab.

  2. Click the Actions button Add for the Organization and choose Assign Organization Roles.

  3. Choose the Role to assign and you see the current assignees listed.

  4. To add new assignees, click the Available tab to see the Organization members that can be assigned to the Role.

  5. Choose the assignees, then click Update Associations.

Assign an Organization Role within the Organizations section of the Control Panel.

Asset Library Roles

Making Role assignments for Asset Libraries is nearly identical to making assignments for Sites: assign Users to an Asset Library Role in the Memberships section of the Asset Library’s People sub-menu.

Permission Scope Available Assignments
A single Asset Library Organizations
User Groups
Individual Users
  1. Go to the Asset Library Menu → People → Memberships.

  2. Click the tab for the membership type you’re assigning the Role. Like Sites, Asset Libraries are assigned to Users (i.e., individual Site members), Organizations, or User Groups.

  3. Click the Actions button Add → Assign Roles.

  4. Choose the Roles to assign and click Done.

    If assigning a group, all Users assigned to that group inherit the Role.

Assign a Asset Library Role within the Asset Library Menu's People → Memberships section.

Account Roles

You can assign Users to an Account Role in the Accounts Control Panel section.

Permission Scope Available Assignments
A single Account Individual Account Members
  1. Go to Control Panel → Accounts → Accounts, and click on the Account of interest.

  2. Click the Roles tab for the Account.

  3. Choose the Role to assign and you see the current assignees listed.

  4. To add new assignees, click the Available tab to see the Account members that can be assigned to the Role.

  5. Choose the assignees, then click Update Associations.

Assign an Account Role within the Accounts section of the Control Panel.

Default User Associations

By default, new Users receive only the Users Role, but you can manage the default Role associations to add new Roles or remove the User assignment.

Permission Scope Available Assignments
Throughout the Virtual Instance (global) All new Users
  1. Navigate to Control Panel → Configuration → Instance Settings.

  2. Select the Users category under the PLATFORM section.

  3. Click Default User Associations from the left menu.

  4. Use the Regular Roles configuration field to enter a comma-separated list of Regular Roles that all new Users should inherit.

Read more in the Default User Associations documentation.

Use Instance Settings to set the default Regular Roles for all new Users.

Assignment is important, but a Role isn’t worth the database row it occupies without permissions. Read about defining permissions for a Role next.