Roles rework

Today, we released an update to permissions and roles in Create. We expect the update to improve manual and automated access management across units and organizations. Read on for more details!

Previous state

Until now, roles could only be granted on an organization level (Organization admin, Organization contents admin, User, None), and they could only be granted on claim-based criteria.

Changes

Roles now refer to sets of permissions on all content, and the permissions making up roles can be granted on a unit level. In other words, a single role encompasses different unit permissions. Roles can now also be granted manually or by using rules based on claims.

Additionally, the following naming changes are applied:

  • UserView.
  • Contents adminEdit.
  • AdminManage.

The renaming reflects the change of these functions from roles to permissions. The functionality remains the same.

With this update, roles granted by rules are now displayed on the organization and unit Members pages, which previously only displayed manually granted rights.

Update

However, to fully benefit from the update, old roles need to be updated to be reflected on the Members page, which is done by simply opening each role and selecting Update.

If the roles are not updated in this way, each member’s permissions will be updated as they log into Create.