List of Privileges

The following is a list of available privileges.

• Manage Trustees: The ability to create/delete users, groups, and Windows and LDAP accounts, add/remove members of groups, edit the descriptions of users and groups, set a password for any user, set feature rights, enable/disable an account, prevent users from being able to change their passwords, and set a temporary password. Does not allow a user to grant/revoke privileges or assign tags.
• Manage Volumes: The ability to create/delete a volume, attach/detach/export a volume, create logical volumes, limit volume size, grant/deny volume access rights, change the volume name, change the volume paths, and set default volume security.
• Manage Entry Access: The ability to grant/deny entry access rights to all documents and folders in a repository. To smoothly perform this task, this privilege bypasses several security mechanisms, allowing the user to open all folders and assign security on all entries. This privilege also grants the ability to see what documents are currently checked out and to undo another user's check out, and to view the contents of the recycle bin and purge any document within it. Does not grant the ability to assign other types of rights.
• Manage Templates and Fields: The ability to create a field or template, modify an existing field or template, delete a template, view and modify template and field access rights, set default template and field security, and merge fields.
• Create Templates and Fields: The ability to create a new field or template, but not to modify existing fields and templates.
• Manage Stamps: The ability to modify or delete public stamps.
• Manage Tags: The ability to create, modify, or delete an informational or security tag, assign a security tag to a trustee, manage all tags in the Administration Console, and apply them to users.
• Manage Links: The ability to create, modify, or delete a link type.
• Set Trustee Privileges: The ability to grant/deny privileges for a trustee. Does not grant the ability to change your own user privileges.
• Manage Connections: The ability to view all active connections to a repository and disconnect a currently connected user.
• Manage Repository Configuration: The ability to configure a password policy for the repository, turn the recycle bin on or off, and make other modifications in the Settings node of the Administration Console. This privilege also controls who can perform certain configurations in the web client, including custom actions, custom tabs, and repository-wide toolbar settings.
• Purge Entries: The ability to view items in the recycle bin that the user has deleted him or herself and permanently purge those entries. Does not grant the ability to view or purge entries deleted by other users.
• Configure Search/Index: The ability to configure automatic indexing, edit the stop words list, and issue a rebuild index command.
• View Activity Log: The ability to configure and view the repository's activity log. Any user can view the activity log for an entry for which they have the Read right; this privilege allows users to see the activity log for all entries, regardless of whether they have Read. The activity log is generally used in integrations and is only accessible using Laserfiche Server Objects (for instance, as part of a Toolkit script); it is not available in the Laserfiche Windows client or Administration Console.
• Bypass Filter Expressions: The ability to view the contents of an entry regardless of the filter expression that governs that entry. If you are not using folder filter expressions, setting this privilege for all users will enhance performance. Applied to all users by default. 
• Bypass Browse: The ability to see the existence of all entries in the repository, regardless of whether the user has the Browse right for those entries or not. This can enhance performance, as Laserfiche does not need to calculate rights for each entry in each folder. Does not allow users to see documents if they are tagged with a security tag the user does not have or to see the contents of a folder if they do not have the Read right on the folder.
• Manage Filter Expressions: The ability to set filter expressions on folders in the repository. Filter expressions allow you to set security dynamically. In order to set a filter expression on a folder, a user must have this privilege as well as the Write Entry Security entry access right on the folder itself.
• Manage External Tables: The ability to configure definitions for external tables, for use with dynamic fields. This privilege allows you to register an external table.  It is not necessary to set up the dynamic fields once the table has been registered.
  
  
• Retrieve Audit Data: The ability to view the audit history of documents and folders. Does not bypass the Browse entry access right. In general, this privilege is only used by the Web-based audit reader and in integrations; it is not required to allow users to view audit data.
• Manage Audit Settings: The ability to specify which events will be audited on a Laserfiche repository, as well as to configure watermark options using the Watermark item in the Laserfiche Administration Console, assign watermarks to trustees, and manage logging settings.
• Records Management: The ability to carry out all records management operations performed through the Laserfiche Administration Console. This privilege also grants the ability to create/delete record series, modify record series and record folder properties, cutoff/uncutoff records, confirm transfers, confirm final disposition actions, and remove a "Supersedes/Superseded by" document link from a record.
• Manage Certificates: The ability to remove signing certificates from the repository's certificate store. This privilege is not necessary to add a certificate to the store.
• Edit Version Comments: The ability to edit version comments created by other users. This privilege is not necessary for a user to modify their own version comments.
• Delete Document Versions: The ability to permanently delete individual versions from a document's version history.
• Manage Classification Levels: The ability to create, modify or delete a classification level for the repository.