Assigning Users to Roles

The location of a Role’s assignment UI corresponds with the Role’s scope.

Regular Roles

Globally scoped regular roles are available for configuration in the DXP Control Panel.

Permission Scope	Available Assignments
Throughout the Virtual Instance (global)	User Groups Organizations Sites Segments Individual Users

You can assign Users to a Regular Role in the Assignees tab of the Add/Edit Role form.

Go to Control Panel → Users → Roles, and click on a Regular Role.
In the Assignees tab of the Add/Edit Role form, click the tab for the assignment type you need. Regular Roles are assigned to Users, Sites, Organizations, User Groups, or User Segments.
Click the Add button .
Select the assignees and click Add.

If assigning a group, all Users assigned to that group inherit the Role.

You can assign a Regular Role to an entire Organization of Users.

Site Roles

You can assign Users to a Site Role in the Memberships section of a Site’s People sub-menu.

Permission Scope	Available Assignments
A single Site	User Groups Organizations Segments Individual Site Members

Go to Site Menu → People → Memberships.
Click the tab for the membership type you’re assigning the Role. Site Roles are assigned to Users (i.e., individual Site members), Organizations, or User Groups.
Click the Actions button → Assign Roles.
Choose the Roles to assign and click Done.

If assigning a group, all Users assigned to that group inherit the Role.

Assign a Site Role within the Site Menu's People → Memberships section.

note

As of Liferay CE 7.3.1 GA2 and Liferay DXP 7.2 SP3+, you can assign Site Roles to User Segments. See Assigning Roles to User Segments for more details.

Organization Roles

You can assign Users to a Organization Role in the Organizations tab of the Users and Organizations Control Panel section.

Permission Scope	Available Assignments
A single Organization	Individual Users

Go to Control Panel → Users → Users and Organizations, and click on the Organizations tab.
Click the Actions button for the Organization and choose Assign Organization Roles.
Choose the Role to assign and you see the current assignees listed.
To add new assignees, click the Available tab to see the Organization members that can be assigned to the Role.
Choose the assignees, then click Update Associations.

Assign an Organization Role within the Organizations section of the Control Panel.

Making Role assignments for Asset Libraries is nearly identical to making assignments for Sites: assign Users to an Asset Library Role in the Memberships section of the Asset Library’s People sub-menu.

Permission Scope	Available Assignments
A single Asset Library	Organizations User Groups Individual Users

Go to the Asset Library Menu → People → Memberships.
Click the tab for the membership type you’re assigning the Role. Like Sites, Asset Libraries are assigned to Users (i.e., individual Site members), Organizations, or User Groups.
Click the Actions button → Assign Roles.
Choose the Roles to assign and click Done.

If assigning a group, all Users assigned to that group inherit the Role.

Assign a Asset Library Role within the Asset Library Menu's People → Memberships section.

Default User Associations

By default, new Users receive only the Users Role, but you can manage the default Role associations to add new Roles or remove the User assignment.

Permission Scope	Available Assignments
Throughout the Virtual Instance (global)	All new Users

Navigate to Control Panel → Configuration → Instance Settings.
Select the Users category under the PLATFORM section.
Click Default User Associations from the left menu.
Use the Regular Roles configuration field to enter a comma-separated list of Regular Roles that all new Users should inherit.

Read more in the Default User Associations documentation.

Use Instance Settings to set the default Regular Roles for all new Users.