Access
Roles
Define the bundles of access rights that determine what users can do in Lunr, assign them to groups, and look up every access right Lunr offers, grouped by the area it governs.
Overview
A Role is a named bundle of access rights. Roles are not assigned to people directly: they are mapped to Groups, and users inherit a role through the groups they belong to.
This means a role is the place to decide what a job function is allowed to do, and a group is the place to decide who performs that job function.
Managing Roles
The Roles page lists the roles in your organisation. Select Add Role to create a new role.
Select a role to open it. A role's page carries three tabs:
| Tab | What it shows |
|---|---|
| Details | The name and a summary of the role. |
| Access Rights | The rights granted to the role. This is where you decide what the role can do, and every right is listed under Available Access Rights below. |
| Permissions | The permissions held by the role. |
To see which groups, and therefore which users, hold a role, open the group instead and check its Roles tab. There is no equivalent list of members on the role's own page.
Deleting a role has no confirmation prompt
Selecting Delete from a role's Options menu removes the role immediately, with no confirmation dialog. Deleting a role affects every group linked to it, so check the group assignments before you delete one.
Available Access Rights
The Access Rights tab lists every right Lunr defines, grouped by the area it governs. Select a right to grant it to the role, and clear it to revoke it.
The tables below give each right as the Access Rights tab shows it beside its toggle, and what it allows.
Each right saves immediately when you select or clear it; there is no separate Save button for the tab. If a toggle fails to save, it reverts to its previous state and shows an error.
Rights accumulate rather than compete. A user holds the sum of the rights carried by every role their groups hold, so a right granted anywhere is granted, and removing it means removing it from each role that carries it.
You may not see every right below. A right belonging to a feature your organisation has not enabled does not appear.
Administration and Security
| Access right | What it allows |
|---|---|
| Administration pages | Open the Administration area and manage organisation configuration. |
| Manage users | Invite, edit, approve, disable, and manage user accounts. |
| Manage companies and memberships | Create, edit, and delete company records. |
| Manage folder members and reassign documents/change requests within their company | Administer users and data belonging to their own company. |
| View principal audit log | View the organisation's audit event log. |
| Tenancy Owner | Marks the user as an owner of the organisation's tenancy. |
| General Approver | Marks the user as a general approver. |
| Approve/reject registration requests | Approve or reject registration requests from people who have registered themselves. See Reviewing a Registration. |
| Can view data from all companies | See data belonging to every company, not only their own. |
| Can upload resources for tenant configuration | Upload and change the resource configuration and the import and export template files that configure the organisation. |
| User access expires in one day | Makes the user's access expire after one day. |
| User access expires in one week | Makes the user's access expire after one week. |
| User access expires in one month | Makes the user's access expire after one month. |
| User access expires in 6 months | Makes the user's access expire after six months. |
| User access expires in one year | Makes the user's access expire after one year. |
Repositories and Content Configuration
| Access right | What it allows |
|---|---|
| Manage lookup lists and values | Create and edit the lookup lists behind dropdown tags. |
| Manage drafting packs | Create and maintain drafting packs. |
| Manage title block definitions and mappings | Configure title-block attribute mappings. |
| Manage repository templates | Manage document and import/export template files. |
| Folder management | Create and edit folder structures. |
Viewing and Downloading Documents
| Access right | What it allows |
|---|---|
| Permits user to view native files | Open a document's native (source) file in the viewer. |
| Permits users to download native files | Download native (source) files. |
| Share native files | Share native files with others. Roles that held Permits users to download native files when this right was introduced were granted it. |
| Permits users to view and download renditions | Download rendered (published) files. |
| Download restricted files | Download files flagged as restricted, and see the Restricted Docs tab on a repository. |
| View deleted documents | See documents that have been deleted. |
| View archived documents | See documents that have been archived. |
| View stranded documents | See documents left without a project or folder home. |
| View suppressed revisions | See revisions that have been suppressed from a document's version history, and suppress others. |
| View all documents | See all documents. |
| View minor revisions of documents | See the minor revisions of documents. |
| View major revisions of documents | See the major revisions of documents. |
| View and Apply for Document Permissions | View document permissions, and apply for permissions on documents. |
| View all document repositories | See every document repository in the organisation. |
Creating and Editing Documents
| Access right | What it allows |
|---|---|
| Create a document through the user interface | Create new documents directly in Lunr. |
| Can edit documents | Edit document details and content. |
| Permits users to edit tags | Edit document tag values. |
| Permits users to modify editable tags | Edit general (non-restricted) tag values. |
| Copy tags between documents | Copy tag values from one document to another. |
| Batch update document properties | Update tags on many documents at once. |
| Can Edit Document Location | Change a document's location. |
| Copy/Move documents | Duplicate documents. |
| Create child documents | Fork a document into an independent copy, and promote a personal redline to a child document. |
| Permits users to insert revisions | Insert a revision into a document's history. |
| Restore a document to a previous version | Restore an earlier version of a document. |
| Delete/undelete documents | Delete documents. |
| Archive/unarchive documents | Archive and unarchive documents. |
| Restrict documents | Flag documents as restricted or remove the flag. |
| Update rendition of a document in repository | Replace or regenerate a document's rendition. |
| Can trigger manual PDF stamping | Apply PDF stamps manually. |
| Rename master revisions of documents | Rename master revisions of documents. |
| Can mark document versions as deleted | Mark document versions as deleted. |
| Replace document content as an integration account | Replace a document's content when acting as an integration account. |
Master Documents
| Access right | What it allows |
|---|---|
| Can edit documents outside of a project | Edit documents in the master area. |
| Release documents as a Master revision | Release a document as a master. Also opens the Stamp Library page and allows every change on it. |
| Can merge to parent documents | Merge a document's changes into its parent. |
Review and Workflow
| Access right | What it allows |
|---|---|
| Can review documents | Act as a reviewer on document workflows. |
| Assign documents or requests to different users | Reassign their work to a peer. |
| Checkout documents | Check documents out for editing. |
| Approve checkout | Approve other users' checkout requests. |
| Edit annotations | Add annotations and redlines in the viewer, and save markup as a personal redline. |
| Scan a drawing for references to other drawings from the viewer, ahead of any running scan | Scan the open drawing for references immediately from the References panel, ahead of any scan that is running. It is not granted by default. |
| Permits user to approve redline requests | Approve or reject redline mark-ups. |
| Resolve or reopen any comment | Resolve document comment threads. |
| View configurable workflow on a document | See configurable-workflow status on documents. |
| Enable a document for configurable workflow | Move documents onto the configurable workflow. |
| View document queues | View the document processing queue. |
| Manage document queues | Manage and reorder the document processing queue. |
| Attach checklists and edit checklist items | Complete and edit the checklists attached to change requests and projects. |
| Verify, reject or mark checklist items not applicable | Verify checklist items another user has completed. |
| Manage checklist templates | Create and edit the checklist templates in the organisation's library. |
| View all workflows | See every workflow, including its actions and audit history. |
| Edit workflows | Edit workflows and their data. See Workflow Editor. |
| Detach attached checklists | Detach checklists that have been attached to change requests and projects. |
Change Requests
| Access right | What it allows |
|---|---|
| Transition change requests through workflow | Move change requests through their workflow. Without it, the Request Workflow action is not offered. |
| Override change request fields | Override locked change request fields. |
| Manage shared change request lists | Manage change requests shared with external parties. |
| Can access all requests in the system | See and manage all requests, not just their own. |
| View Drawing Number Requests | View drawing number requests. |
| Create change requests from collections | Raise a Change Request from a collection. |
| Change request reviewer | Be used as a reviewer on change requests when no other reviewers are configured for the repository. |
| View all change request folders | See every change request folder, not only those the user belongs to. |
Projects and Facilities
| Access right | What it allows |
|---|---|
| View all projects and make changes to them | Create, edit, and archive projects. |
| Act as a manager of a project | Act as a project manager on assigned projects. |
| Act as an external project manager | Act as an external (third-party) project manager. |
| Allow external project managers to invite any user | Act as an external project coordinator. |
| Can Assign to Project | Assign documents and people to projects. |
| Permits users to upload to a project root folder | Upload files at the projects root level. |
| Permits users to delete project data | Delete data belonging to a project. |
| Create Facilities | Create facilities and portfolio entries. |
| View All Projects | See all projects, not only those the user belongs to. |
| View all project folders | See every project folder, not only those the user belongs to. |
Sharing and Collections
| Access right | What it allows |
|---|---|
| All Shares | See and manage every share, not just their own. |
| Manage Shared Collections | Create and manage shared collections. |
| Manage shared report collections | Manage shared report collections. |
| Share redlines with everyone | Share a personal redline with everyone who has access to the repository, not only chosen people and groups. Seeded for the Administrator role. |
| View Shared Collections | View shared collections. |
RFIs and Reports
| Access right | What it allows |
|---|---|
| Permits users to create general RFIs | Create general (non-document) RFIs. |
| View Reports | Open and run reports. |
| Can administer global reports | Create and configure reports. |
| Permits the user to create RFIs within a project | Create RFIs within a project. |
Coordination Issues
These rights apply when the Enable issues setting is enabled under Document Viewer Settings on the General Settings page.
| Access right | What it allows |
|---|---|
| View coordination issues | See coordination issues, from a project's Issues tab or My Issues. |
| Create coordination issues | Raise a coordination issue against a point on a drawing. |
| Manage any coordination issue | Manage any coordination issue, not only their own. |
| Manage coordination issue states and categories | Manage the states and categories that coordination issues use. |