Content Management System Permissions Reference

Beta Feature Liferay DXP 2025.Q4+

Important

Currently, this feature is behind a beta feature flag (LPD-17564) and also depends on release feature flags (LPS-179669 and LPD-34594). Read Feature Flags for more information.

Assign permissions to roles and users to manage access to spaces, folders, content, files, vocabularies, and categories in the Content Management System (CMS). See Managing Permissions in the Content Management System for more details.

Here’s a list of all permissions associated with the CMS.

Space Permissions

Space permissions define which users and roles can access and manage spaces in the CMS.

Assign permissions to users and roles for spaces in the CMS.

PermissionDescription
Assign User RolesPermission to assign roles to other users within the space
DeletePermission to delete content, files, or the space itself (depending on context)
View Site and Asset Library Administration MenuPermission to the administrative menu for sites and asset libraries
View StagingPermission to view content in staging mode
PermissionsPermission to view or manage permissions for the space
Assign MembersPermission to add or remove users from the space
View MembersPermission to see a list of members in the space
Publish StagingPermission to publish staged content
UpdatePermission to modify content, files, or space settings
ViewPermission to read the space and its content
Important

Users must also have VIEW permissions on the underlying CMS content structures to access content and files.

  • Out-of-the-box content structures: VIEW permission is enabled by default.
  • Custom CMS content structures: VIEW permission is disabled by default.

Without the correct content structure permissions, users may not see content even if they are members of the space.

Folder Permissions

Folder permissions control who can view, add, update, or delete folders and their content within a space. Roles can also subscribe to folders to receive notifications when content changes.

Assign permissions to folders in the CMS.

PermissionDescription
Add EntryAdd files to folders.
DeleteMove folders to the recycle bin.
PermissionsView and modify folder permissions.
UpdateEdit or move folders.
SubscribeSubscribe to receive email notifications when files are added to or modified in folders.
ViewView folders.
Add FolderAdd folders.

Content and File Permissions

These permissions govern access to CMS content and files, including rights to view, edit, delete, comment, and manage permissions.

Assign permissions to assets in the CMS.

PermissionDescription
Update DiscussionEdit another user’s comment on the asset.
DeleteMove the asset to the Recycle Bin.
PermissionsView or modify the asset’s permissions.
Object Entry HistoryQuery entry history via REST APIs.
Delete DiscussionDelete comments on the asset.
UpdateEdit or update the asset.
ViewView the asset.
Add DiscussionComment on the asset.

Vocabularies and Categories Permissions

These permissions control access to vocabularies and categories, including creating, editing, viewing, and deleting them within the CMS.

PermissionDescription
DeleteDelete vocabularies or categories.
PermissionsView or modify permissions for vocabularies or categories.
UpdateEdit vocabulary properties or update category details.
ViewView vocabularies and categories.
Add Category (categories only)Add a new category to the vocabulary.