Setting Permissions on a Design/Change-Time Policy
Be default, all users have View permissions on the design/change-time policies in the registry.
Users who belong to a role that includes the Manage Design/Change-Time Policies permission for an organization have Full permission on the policies that belong to the organization. Users who belong to a role that includes the Manage System-Wide Design/Change-Time Policies permission, have Full permission on all system-wide policies. To enable other users to modify and/or delete policies, you must modify the policy's instance-level permission settings.
You can modify the instance-level permissions for a policy by executing a design/change-time policy or by specifying the permissions manually on the Permissions tab in CentraSite Control.
When setting permissions on policies, keep the following points in mind:
![*](bullet.gif)
To set permissions on a organization-specific policy, you must belong to a role that has the
Manage Design/Change-Time Policies for the organization to which the policy belongs or have the Full instance-level permission on the policy itself.
![*](bullet.gif)
To set permissions on a system-wide policy, you must belong to a role that has the
Manage System-Wide Design/Change-Time Policies or have the Full instance-level permission on the policy itself.
![*](bullet.gif)
You can assign permissions to any individual user or group defined in
CentraSite.
![*](bullet.gif)
The groups to which you can assign permissions include the following system-defined groups:
Group Name | Description |
Users | All users within a specified organization. |
Members | All users within a specified organization and its child organizations. |
Everyone | All users of CentraSite including guest users (if your CentraSite permits access by guests). |
![*](bullet.gif)
If a user is affected by multiple permission assignments, the user receive the union of all the assignments. For example, if group ABC has Modify permission on a policy and group XYZ has Full permission on the same policy, users that belong to both groups will, in effect, receive Full permission on the policy.