Security roles
Roles are made up of a collection of permissions that let users complete allowed tasks within Collect. Unauthorized users can't see data they're not meant to.
Rules
- The users or groups you can select must be in your directory service.
- Within each app, each user must be associated with only one role.
- At least one Collect Administrator must exist at all times.
- A second valid administrator must be added before an existing Collect Administrator can be removed.
Global roles
| Role | Permissions |
|---|---|
| Collect Administrator | Full access, everywhere |
| Application Creator | Create and import new Collect apps |
Only Collect Administrators can:
- Assign global roles to users or groups
- Edit global roles for new or existing users
- Manage global lookup lists
Application-level roles
| Role | Permissions |
|---|---|
| Application Administrator | All permissions within a designated app |
| Contributor | All record-management permissions |
| Reader | View and export records |
Only Application Administrators can assign and edit application-level roles for their app, and manage that app's lookup lists.