Assigning Users to Roles

The location of a Role’s assignment UI corresponds with the Role’s scope.

Regular Roles

Globally scoped regular roles are available for configuration in the DXP Control Panel.

Permission Scope	Available Assignments
Throughout the Virtual Instance (global)	User Groups Organizations Sites Segments Individual Users

You can assign Users to a Regular Role in the Assignees tab of the Add/Edit Role form.

1. Go to Control Panel → Users → Roles, and click on a Regular Role.

2. In the Assignees tab of the Add/Edit Role form, click the tab for the assignment type you need. Regular Roles are assigned to Users, Sites, Organizations, User Groups, or User Segments.

3. Click the Add button .

4. Select the assignees and click Add.

   If assigning a group, all Users assigned to that group inherit the Role.

Site Roles

You can assign Users to a Site Role in the Memberships section of a Site’s People sub-menu.

Permission Scope	Available Assignments
A single Site	User Groups Organizations Segments Individual Site Members

1. Go to Site Menu → People → Memberships.

2. Click the tab for the membership type you’re assigning the Role. Site Roles are assigned to Users (i.e., individual Site members), Organizations, or User Groups.

3. Click the Actions button → Assign Roles.

4. Choose the Roles to assign and click Done.

   If assigning a group, all Users assigned to that group inherit the Role.

note

As of Liferay CE 7.3.1 GA2 and Liferay DXP 7.2 SP3+, you can assign Site Roles to User Segments. See Assigning Roles to User Segments for more details.

Organization Roles

You can assign Users to a Organization Role in the Organizations tab of the Users and Organizations Control Panel section.

Permission Scope	Available Assignments
A single Organization	Individual Users

1. Go to Control Panel → Users → Users and Organizations, and click on the Organizations tab.

2. Click the Actions button for the Organization and choose Assign Organization Roles.

3. Choose the Role to assign and you see the current assignees listed.

4. To add new assignees, click the Available tab to see the Organization members that can be assigned to the Role.

5. Choose the assignees, then click Update Associations.

Asset Library Roles

Making Role assignments for Asset Libraries is nearly identical to making assignments for Sites: assign Users to an Asset Library Role in the Memberships section of the Asset Library’s People sub-menu.

Permission Scope	Available Assignments
A single Asset Library	Organizations User Groups Individual Users

1. Go to the Asset Library Menu → People → Memberships.

2. Click the tab for the membership type you’re assigning the Role. Like Sites, Asset Libraries are assigned to Users (i.e., individual Site members), Organizations, or User Groups.

3. Click the Actions button → Assign Roles.

4. Choose the Roles to assign and click Done.

   If assigning a group, all Users assigned to that group inherit the Role.

Default User Associations

By default, new Users receive only the Users Role, but you can manage the default Role associations to add new Roles or remove the User assignment.

Permission Scope	Available Assignments
Throughout the Virtual Instance (global)	All new Users

1. Navigate to Control Panel → Configuration → Instance Settings.

2. Select the Users category under the PLATFORM section.

3. Click Default User Associations from the left menu.

4. Use the Regular Roles configuration field to enter a comma-separated list of Regular Roles that all new Users should inherit.

Read more in the Default User Associations documentation.

Assignment is important, but a Role isn’t worth the database row it occupies without permissions. Read about defining permissions for a Role next.