Creating a Role and Granting Permissions

To create a role:

Select the Administration tab.
Click Roles from the Administration workspace.

Note

The Admin , Case Manager , and Case Researcher roles are default roles and are visible in the Role pane.
Click Add Role from the Roles panel .
Type a name for this new role in the Name text box . Ensure that you provide a unique name.
Type a description for the new role that you are creating in the Description text-box.
Select the required permissions for this role from the Permissions panel. The Permissions' pane allows you to grant permissions for the features listed and described in the following table.
Click Submit to submit the form with the set permissions to the Enterprise Archive application. Enterprise Archive creates the new role. You can view this role in the Roles pane.

Note

If an administrator changes the role of an active user, the system immediately terminates the user's active session, thereby preventing any unauthorized action by the user.

Table 1: Role Permissions

Permission Category	Permission Name	Description	Default Value
ADMINISTRATION PERMISSIONS
Administration	Show Administration Tab	Permission to view and access the Administration tab.	Allow
Administration: User Management	View User	Permission to view the details of Enterprise Archive user.	Allow
	Edit User	Permission to update the profile of an existing Enterprise Archive user.	Allow
	Delete User	Permission to delete the profile of an existing Enterprise Archive user.	Deny
	Import User	Permission to import user details into Enterprise Archive.	Allow
Administration: Role Management	View Role	Permission to view the definition of user roles.	Allow
Administration: Role Management	Edit Role	Permission to update an existing role.	Allow
Administration: Participant Management	View Participant	Permission to view the details of participants.	Allow
Administration: Participant Management	Import Participant	Permission to import the details of participants.	Deny
Administration: Participant Group Management	View Participant Group	Permission to view the details of a participant group.	Allow
Administration: Participant Group Management	Import Participant Group	Permission to import the details of a participant group.	Deny
Administration: User Activity Log	View User Activity Log	Permission to view the user activities that are logged in Enterprise Archive.	Deny
Administration: Configure	Edit Password Policy	Permission to modify or update the password policy for an Enterprise Archive user.	Deny
	Single Sign On	Permission to configure Single Sign-on settings for Enterprise Archive users.	Deny
	Edit Options	Permission to configure session timeout for Enterprise Archive users.	Deny
	Edit Alert Templates	Permission to configure alert templates for Enterprise Archive users.	Allow
	Scheduled Export Location	Permission to configure the export location for scheduled exports in Enterprise Archive.	Deny
	View API Clients	Permissions to view API Clients. If this is disabled, you will not be able to create, edit, enable, or disable API Clients.	Deny
	Create API Clients	Permissions to create API Clients.	Deny
	Edit API Clients	Permissions to edit API Clients.	Deny
	Enable/Disable API Clients	Permissions to enable or disable API Clients.	Deny
	Enable Network & Channel Icon Configuration	Permissions to configure icons to networks and channels that are available in your tenant.	Deny
Administration: Dashboard	Exports	Permission to view or modify export activities for Enterprise Archive users.	Deny
CASE MANAGEMENT PERMISSIONS			[TOP]
Case Management	Show Case Management Tab	Permission to view the Case Management tab.	Allow
	Create Case	Permission to create case.	Allow
	Update Case Details	Permission to edit the notes added to cases.	Allow
	Update Case Custodians	Permission to add or delete the custodian of a case.	Allow
	Update Case Assignments	Permission to assign a new user with case specific role to a case or delete a custodian of a case.	Allow
	Update Case Tags	Permission to associate the case tag group.	Allow
	View and Update All Cases	Permission to update case details of all the cases present.	Deny
	Update Case Restrictions	Permission to display conversations based on selected custodians and the case restrictions defined within the respective case.	Deny
Case Management: Collect	Access to Collect Work Space	Permission to access the Collection workspace of assigned cases.	Allow
	Edit Case Search	Permission to edit the search criteria entered in the Search panel for searching cases.	Allow
	Apply Holds	Permission to apply holds from within the Collection workspace	Allow
	Release Holds	Permission to release holds from within the Collection workspace	Allow
	Perform Export	Permission to export selected conversation(s) or snapshot (s) from the search results.	Deny
	Full Archive Access	Permission to search across the entire archive. When this permission is granted, then search performed by this user is not limited to custodians within a case. Note Ensure that the permission is set to Deny to search by Legal Entities .	Deny
	Collect Items	Permission to Collect conversation(s) or snapshot(s) into a case or release them from a case.	Allow
	Delete Case Search	Permission to delete saved search results.	Deny
	High Priority Collect Export	Permission to perform a high priority export from within the Collection Workspace	Deny
	View All Jobs	Permission to view all jobs from within the Collection Workspace.	Allow
	Create Case Search	Permissions to create saved search criteria from the Case Collect workspace.	Allow
	Share search templates to the cases I am part of	Permissions to share a user's search templates to other users.	Deny
	Share search templates to all cases in the system	Permissions to access all search templates to all cases in Enterprise Archive.	Deny
Case Management: Review	Case Review	Permission to the following: Access review phase of assigned cases. Search documents that are on hold. Save or update the search criteria on hold data. Delete a saved search criteria on hold data.	Allow
	Edit Review Search	Permission to edit and modify the search criteria in the Search panel in Case Management:Review process.	Allow
	Tag Content	Permission to tag or update tags for a conversation, snapshot, or a document.	Allow
	Review Export	Permission to export a snapshot on hold.	Deny
	Apply Holds	Permission to apply holds from within the Review workspace.	Allow
	Release Holds	Permission to release held documents from within the Review workspace.	Allow
	Uncollect	Permission to Uncollect conversation(s) or snapshot(s) from a case.	Deny
	High Priority Review Export	Permission to perform high priority export from within the Review workspace.	Deny
	View All Jobs	Permission to view all jobs from within the Review workspace.	Allow
	Create Review Search	Permissions to create saved search criteria from the Case Review workspace.	Allow
	Access All Exports	Permission to view and access all the exports performed in Case Management. When denied, only the export performed by the logged-in user is visible in the Exports page.	Deny
Case Management: Configure	View Tags	Permission to view tag group details and tag group list.	Allow
	Edit Tags	Permission to create and update tags.	Allow
	Edit Options	Permission to edit options from within the Configure tab.	Deny
Case Management: Scheduled Exports	Case Management Scheduled Exports	Permissions to perform a scheduled export in the Case Management workspace.	Deny
Case Management: Scheduled Exports	Available and Permitted Export Locations	Allows you to assign permissions for all the configured SFTP and Network Share export locations. To enable the permission to an export location, click the Add export location button (+) against each Export Location to assign permissions. Once added, the permitted export location must be visible under the Permitted Export Locations pane. Similarly, to remove permissions for an Export Location, click the Remove export location button (-)against the respective export location under the Permitted Export Locations pane. Note Existing scheduled exports will not be affected if the permission for an export location is removed. This ensures that there are no disruptions to existing scheduled exports, Enterprise Archive will continue to use the previously configured export location until changed. If a user is denied permission for a pre-configured export location, the Enterprise Archive UI displays Download from Enterprise Archive for such scheduled exports.
Case Management Restriction Policy		Allows you to filter custodians by Participants, Groups, Networks, Channels, Countries, Divisions, Departments, and any other custom attributes that are added when data is ingested into Enterprise Archive. See Restricting Access to the Corpus for more information.
ARCHIVE MANAGEMENT PERMISSIONS			[TOP]
Archive Management	Show Archive Management Tab	Permission to view the Archive Management tab.	Allow
Archive Management: Content Sources	Configure Content Sources	Permission to configure the content sources.	Allow
Archive Management: Retention and Disposition	Edit Retention	Permission to: add retention policies update retention policies delete retention policies set disposition action modify the default policy	Allow
Archive Management: Retention and Disposition	View Message Retention Details	Permission to view all the retention policies set in Enterprise Archive. This permission enables administrators to control the access to view the Message Retention tile (in Archive Management) as this may contain sensitive information.	Deny
Archive Management: Search	Archive Search	Permission to search archived results.	Allow
	Archive Export	Permission to export and print the archived search results.	Deny
	Full Archive Access	Permissions to search for restricted conversations within entire corpus, when set to Allow. When set to Deny, users will not be able to access any content within the Archive,	Allow
	High Priority Archive Export	Permission to perform high priority export and print the archived search results.	Deny
	Access All Exports	Permission to view and access all the exports performed in Archive Management. When denied, only the export performed by the logged-in user is visible in the Exports page.	Deny
Archive Management: Dashboards	View Dashboards	Permission to view Archive Metrics Dashboard.	Allow
Archive Management: Ingestion Logs	View Ingestion Logs	Permission to view the data ingestion logs.	Allow
Archive Management: Disclaimers	View Disclaimer	Permission to view disclaimers.	Deny
Archive Management: Disclaimers	Edit Disclaimer	Permissions to add disclaimers.	Deny
Archive Management: Scheduled Exports	Archive Scheduled Exports	Permissions to perform a scheduled export in the Archive Management workspace.	Deny
Archive Management: Scheduled Exports	Available and Permitted Export Locations	Allows you to assign permissions for all the configured SFTP and Network Share export locations. To enable the permission to an export location, click the Add export location button (+) against each Export Location to assign permissions. Once added, the permitted export location must be visible under the Permitted Export Locations pane. Similarly, to remove permissions for an Export Location, click the Remove export location button (-)against the respective export location under the Permitted Export Locations pane. Note Existing scheduled exports will not be affected if the permission for an export location is removed. This ensures that there are no disruptions to existing scheduled exports, Enterprise Archive will continue to use the previously configured export location until changed. If a user is denied permission for a pre-configured export location, the Enterprise Archive UI displays Download from Enterprise Archive for such scheduled exports.
Archive Management Restriction Policy		Allows you to filter custodians by Participants, Groups, Networks, Channels, Countries, Divisions, Departments, and any other custom attributes that are added when data is ingested into Enterprise Archive. See Restricting Access to the Corpus for more information.
Conduct PERMISSIONS			[TOP]
Conduct	Show Conduct Tab	Permission to view the Conduct tab in the Enterprise Archive UI.	Deny
	Queue Configuration Access	Permission to configure queues.	Deny
	Access Policies	Permission to access policies.	Deny
	Access Tag Groups	Permission to access tag groups.	Deny
	Edit Notification Template	Permission to edit notification templates.	Allow
Conduct: List Library	View Library	Permission to view Conduct List Library.	Deny
Conduct: List Library	Edit library	Permission to edit Conduct List Library.	Deny
Conduct: Policies	Create and edit my Policies	Permission to be able to create policies and edit them.	Deny
Conduct: Policies	Edit any Policy	Permission to be able to edit any policy, even if the user has not created it.	Deny
Conduct: Sampling Profiles	View Sampling Profile	Permission to view Sampling Profile.	Deny
Conduct: Sampling Profiles	Edit Sampling Profile	Permission to edit Sampling Profile.	Deny
Conduct: Queues	Enable Queues as Queue Administrator	Permission to enable/disable a queue, contingent to the user being a queue administrator.	Deny
	Edit all Queue Attributes as Queue Administrator	Permission to edit all queue attributes of all assigned queues. Queue workspace actions will be grayed out for all other users.	Deny
	Edit Queue Reviewers as Queue Administrator	Permission to add/remove Reviewers, configure review levels, configure action tags for Update, Close, Escalate across review levels as part of Queue configuration.	Deny
	Edit Supervised Participants/Groups as Queue Administrator	Permission to only add/remove supervised participants/groups to a queue, for all assigned queues.	Deny
	Create Queues	Permission to create a new queue or modify/Save As an existing queue.	Deny
	View Access for All Queues	Permission to view all queues not contingent to the user’s queue assignments.	Deny
	Full Edit Access for All Queues	Permission to edit all queues not contingent to the user’s queue assignments.	Deny
	Delete/Edit any Saved Search	Permission to edit or delete saved searches that are present in the review queue, including saved searches created by other reviewers.	Deny
Conduct: Tag Groups	Create and edit Tag Groups	Permission to be able to create and edit tag groups.	Deny
Conduct: Review	Claim unassigned	Permission to be able to claim a document that is not assigned to another reviewer.	Allow
	Release Assigned	Permission to be able to release a claimed document.	Allow
	Re-assign	Permission to be able to re-assign an assigned document to another reviewer.	Deny
	Escalate assigned	Permission to escalate the assigned document to another higher level reviewer.	Allow
	Close assigned	Permission to be able to close the assigned document.	Allow
	Update assigned	Permission to update an assigned document with tags or comments.	Allow
	Assign unassigned	Permission to assign an unassigned document to a reviewer.	Deny
	Escalate unassigned	Permission to escalate an unassigned document.	Allow
	Close unassigned	Permission to close an unassigned document.	Allow
	Update unassigned	Permission to update tags or comments on an unassigned document.	Allow
	Bulk Review	Permission to perform review of multiple documents.	Deny
	Reviewer(s) Can See their Messages	Permission to view messages that have been flagged.	Deny
	Allow Self Review Actions	Permission to take action on messages that have been flagged.	Deny
	Show Closed Items	Permissions to view documents that have been closed by reviewers.	Deny
	Exports	Permissions to export items out of a review queue.	Deny
	Access All Exports	Permission to view and access the exports by all reviewers in the queue. When denied, only the export performed by the logged-in reviewer is visible in the Exports page.	Deny
	High Priority Exports	Permission to perform high priority exports by all reviewers in the queue.	Deny
	Track Action Status	Permission to track action status of conversations in the queue. Enabling this permission allow users to track the actions of the documents that belong to other Conduct users.	Deny
	Custom Email Notification	Permission to custom the email notification where you can create your own Subject and Body.	Deny
	Close Again	Permission to update Action tags on closed items. The Close action will be enabled on closed items to allow the user to perform this action.	Deny
	Re-Open	Permission to re-open and assign closed conversations to reviewers.	Deny
Conduct: Archive Search	Enable Archive Search	Permissions to enable the Archive Search menu option while reviewing documents.	Deny
	Add To Review Queue	Permission to add documents retrieved during Archive Search to the review queue.	Deny
	View Status	Permission to view status of the document. Enabling this permission allow users to view the status of the documents that belong to other Conduct users.	Deny
Conduct: Dashboard	View Conduct Dashboard	Permission to view Conduct dashboard.	Deny
Conduct: Configure	Edit Options	Permission to use and edit the Queue Specific Role menu option	Deny
REPORTS PERMISSION			[TOP]
Reports	Show Reports Tab	Permission to view the Reports tab in the Enterprise Archive UI.	Deny
Reports: Conduct: Reviewer	Enable Reviewer Reports	Permission to view Reviewer reports.	Deny
	Edit Report	Permission to edit Reviewer reports.	Deny
	Available Reports and Permitted Reports	Allows you to assign permission to the list of available Reviewer reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of available Reviewer reports, see Reviewer reports.
Reports: Conduct: User Message	Enable User Message Reports	Permission to view User Message report.	Deny
	Edit Report	Permission to edit a User Message report.	Deny
	Available Reports and Permitted Reports	Allows you to assign permission to the list of available User Message reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of available User Message reports, see User Message reports.
Reports: Conduct: Policy	Enable Policy Stats Reports	Permission to view Policy report.	Deny
	Edit Report	Permission to edit a Policy report.	Deny
	Available Reports and Permitted Reports	Allows you to assign permission to the list of available Policy reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of available Policy reports, see Policy reports.
Reports: Conduct: Queue	Enable Queue Stats Reports	Permission to view Queue report.	Deny
	Edit Report	Permission to edit a Queue report.	Deny
	Available Reports and Permitted Reports	Allows you to assign permission to the list of available Queue reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of available Queue reports, see Queue reports.
Reports: Conduct: Others	Enable Other Reports	Permission to view other Conduct reports.	Deny
Reports: Conduct: Others	Available Reports and Permitted Reports	Allows you to assign permission to the list of other available Conduct reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of other available Conduct reports, see Others reports.
Reports: Administrative	Enable Administrative Reports	Permission to view administrative report.	Deny
Reports: Administrative	Available Reports and Permitted Reports	Allows you to assign permission to the list of available Administrative reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of available Administrative reports, see Administrative reports.
Reports: Scheduled Reports	Configure Scheduled Reports	Permissions to schedule reports in the Reports workspaces.	Deny
Reports: Case Reports	Enable Case Reports	Permission to view Case reports.	Deny
Reports: Case Reports	Available Reports and Permitted Reports	Allows you to assign permission to the list of available Case reports. Click the + against the respective reports to permit access. Click - against the report from the Permitted Reports pane to remove access. For the list of available Administrative reports, see Case reports.
GLOBAL PRIVILEGE			[TOP]
Global Privilege	Message Download	Permission to download messages or snapshots from the UI.	Deny
Global Privilege	Download All Export Packages	Permission to download all exported packages at once.	Deny