Liferay Headless Content Management System

Content Management System Permissions Reference

Release Feature (LPD-17564) Liferay DXP 2026.Q1+

Assign permissions to roles and users to manage access to spaces, folders, content, files, vocabularies, and categories in the Content Management System (CMS). See Managing Permissions in the Content Management System for more details.

Here’s a list of all permissions associated with the CMS.

Important

Activate the headless CMS using release feature flags. See Activating the Liferay CMS for more information.

Space Permissions

Space permissions define which users and roles can access and manage spaces in the CMS.

Assign permissions to users and roles for spaces in the CMS.

PermissionDescription
Assign User RolesAssign specific roles to other users within the space.
DeleteRemove content, files, or the space itself (depending on context)
View Site and Asset Library Administration MenuAccess the administrative menus for related sites and asset libraries.
View StagingView content that is currently in staging mode.
PermissionsView or manage permission settings for the space.
Assign MembersAdd or remove users from the space
View MembersAccess the list of members currently assigned to the space.
Publish StagingPush staged content to the live environment.
UpdateModify content, files, or space settings.
ViewRead the space and its associated content.
Important

Users must also have VIEW permissions on the underlying CMS content structures to access content and files.

  • Out-of-the-box content structures: VIEW permission is enabled by default.
  • Custom CMS content structures: VIEW permission is disabled by default.

Without the correct content structure permissions, users may not see content even if they are members of the space.

Folder Permissions

Folder permissions control who can view, add, update, or delete folders and their content within a space. Roles can also subscribe to folders to receive notifications when content changes.

Assign permissions to folders in the CMS.

PermissionDescription
Add EntryCreate or upload new files within folders.
DeleteMove folders to the recycle bin.
PermissionsView and modify folder permissions.
UpdateEdit folder details or move them to different locations.
SubscribeReceive email notifications when users add or modify files within a folder.
ViewAccess and browse folders.
Add FolderAdd folders.

Content and File Permissions

These permissions govern access to CMS content and files, including rights to view, edit, delete, comment, and manage permissions.

Assign permissions to assets in the CMS.

PermissionDescription
Update DiscussionEdit another user’s comment on the asset.
DeleteMove the asset to the recycle bin.
PermissionsView or modify the asset’s permissions.
Object Entry HistoryQuery entry history via REST APIs.
Delete DiscussionDelete comments on the asset.
UpdateEdit or update the asset.
ViewView the asset.
Add DiscussionComment on the asset.

Vocabularies and Categories Permissions

These permissions control access to vocabularies and categories, including creating, editing, viewing, and deleting them within the CMS.

Assign permissions to vocabularies and categories in the CMS.

PermissionDescription
DeleteDelete vocabularies or categories.
PermissionsView or modify permissions for vocabularies or categories.
UpdateEdit vocabulary properties or update category details.
ViewView vocabularies and categories.
Add Category (categories only)Add a new category to the vocabulary.