Creating database management groups

Database Management groups grant permissions to users. For each Database Management group, you define the permissions of the group by turning on one or more checkboxes.

Users who become members of the group inherit these permissions:

Add Entity/Link Records

ON: Entity and link records can be added, either individually or by importing. Labeling schemes can be created.

OFF: Records cannot be created, members can still find, browse, and show the records in the database.

Update Entity/Link Records

ON: Records created by the user can be edited.

OFF: Records cannot be changed in any way. This includes batch editing, assigning new icons, and merging.

Delete Entity/Link Records

ON: Records created by the user can be deleted.

OFF: Records cannot be deleted, either individually or by using batch delete.

Update/Delete Entity/Link Records created by other users

ON: Members can edit and delete:

  • Any record in the database that they can see

  • Entries on pick lists

  • Entries on icon lists

OFF: Members cannot edit or delete any of the items listed opposite.

Add Folder Objects

ON: Members can add or save, for example:

  • Sets

  • Queries

  • Report definitions

  • Import and export standard and batch specifications

  • Charting schemes (providing they also have the Add Entity/Link Records permission)

OFF: Members can run queries, reports, and so on, either by using definitions created by others or by using new definitions of their own but they cannot save their own definitions.

Update Folder Objects

ON: For folder objects created by a member, a member can edit existing objects (see the above list). Members can also edit the contents of existing sets, including appending records to existing sets.

OFF: Once a member has added a new folder object, they cannot edit it.

Delete Folder Objects

ON: Members can delete folder objects that they have added.

OFF: Once a member has added a new folder object, they cannot delete it.

Update/Delete Restricted Folder Objects created by other users

ON: Members can update and delete restricted folder objects in the database. (Note: Do not grant this permission to non-administrative users if it is important to preserve folder object restrictions. See Folder Object Control Groups for details.)

OFF: Members cannot update or delete restricted folder objects created by others. Members can only update or delete the objects that they create.

Update/Delete Public Folder Objects created by other users

ON: Members can update and delete any public folder object in the database.

OFF: Members cannot update or delete public folder objects created by others. They can only update or delete folder objects that they create.

Database Creator, Database Administrator, Security Administrator

System roles that are only for administrative users. See Administrative Users for details.

Audit Administrator

This role allows members of the group to view restricted audit logs in Audit Viewer.

For additional details, see Database Management Groups.