| # Overview The Object Data Management authorization mechanism is based on user roles. The operations that users are permitted to perform on an Object Data Management object depends on the Object Data Management user role that is assigned to the user and the user’ s associated actions. User roles are assigned authorizations to perform specific operations on specific objects. For example, you can authorize the user role Field Service Engineer to create documents, but not to delete documents, whereas the user role Supervisor can be authorized to perform all document-related operations. The operations that the user can perform on an object, for example, to create or delete a document, are referred to as actions in Object Data Management. Actions can be grouped together in action groups. For example, you can group together all actions that can be performed on a change or a document to form one action group. To set up user authorizations and perform operations on an object, you must assign actions and action groups to user roles. Users are authorized to perform all actions that are assigned to one of the users ’ roles. The ODM administrator is responsible for assigning actions to user roles. To assign these roles, the administrator must have LN super user privileges. The ODM administrator must define organization-specific action groups to simplify the set up of the authorization structure required by the organization. |