Roles and Permissions

Information

The roles and permission guide contains non-default features of eSignAnyWhere. If you are interested in these optional features please contact us.

This section guides you through all settings referencing the predefined roles and permission and the settings to create a new role with customized permissions.

Predefined roles

Please note that the following roles and permissions in this section are not editable.
There are the following three predefined roles which you can find in your organization in the section Users

  • Power User
  • Registered Signer
  • Administrator
  • Sender for AutomaticSealing
  • Developer

The user “Power User” can send and manage envelopes.
The user “Registered Signer” can sign documents and see the signed documents and tasks.
The user “Administrator” is able to change organization settings, manage users and the user can define teams
The user “Sender for AutomaticSealing” can use the automatic remote signatures in a workflow
The user “Developer” can download the envelope XML/JSON of his/her envelopes.

You can find these predefined roles in the section “Roles and Permission” in your organization:

Define new roles

In addition to the predefined roles and permissions you can define your own roles. So, for example you can define a new role, where the user can manage and send envelopes, but not create the envelopes on their own. Or a role which can configure automatic remote signatures themselves, without being user managers.

Note: To each user, one or several roles can be assigned.

In your organization you can find the section “Roles and Permission”. There you can find the following settings:

Figure Description
  1. You can define new roles and define permissions for the role
  2. You can define a new role as copy of an existing role
  3. You can edit a role in a separate page

In the editor of the roles you can:

  • Change the identifier of a role (only when no user is assigned to that role)
  • find a list of users assigned to the role
  • allow adding users to the role
  • find a list of all permissions that can be configured for the role, including the ability to edit them

Attention: There must be at least one user who can edit the roles.

Permissions

Please note the following restrictions:

  • A permission can be granted (allow), not-granted (forbid) or blocked in each of the roles.
  • As soon as a permission is configured to allow by minimum one role (but not blocked by another role), the permission is granted.
  • As soon as one role blocks a permission, it is not granted/blocked for the resulting permission set.

Moreover:

  • If a permission is set to allow, but the depending features are not enabled the final permission status is forbid
  • If a permission is set to allow, but its permission dependencies are not met the final permission status is forbid
  • If a permission is set to allow in one or more roles, but another role sets the permission to block the final permission status is forbid

For your roles you can also set the permissions. Before we have a look at the different permissions please see the following name schema:

  • create: for permissions that create an object (e. g. envelope – regardless if from clipboard, from template etc.)
  • read: if a single item is presented to the user
  • list: if many items are listed to the user (e. g. address book)
  • edit: if one or many items are edited. Edit includes change but not deletion.

Before you read the next section (permission section) please watch  the next video that shows you how to add a new role and set permissions:

With the settings shown in the video the user can then see the following interface:

Permission sections

The view permissions have to be granted in addition to the edit permissions, otherwise the user cannot access and therefore the user cannot edit.

If no additional permissions are granted, the view permission grants just read-only access.

Envelopes

In this section you can find all available permissions which can be set for envelopes.

User can view envelope list

With this permission the user is allowed for all actions corresponding to envelopes/drafts that do not modify an envelope.

User can create, send, edit and delete envelopes

Allows a user with the permission, to create, send, edit and delete envelopes as well as the user can view and/or edit the templates if the permission “templates” is enabled. Furthermore, the user is allowed to use the function “clipboard”. Moreover, the user is allowed to use api methods referring to create and send envelopes.

Additional required permissions || Required feature flag
User can view envelope list Api*
User can view, edit and delete clipboard* Envelope templates*

* optional permissions and features

User can download developer structures (developer mode)

Allows a user with the permission, to download the configuration of the envelope in XML and JSON with the developer mode.

Additional required permissions || Required feature flag
User can view envelope list Api
User can create and send envelopes

User can send envelopes with automatic sealing/signing

With this permission, the user is allowed to use the automatic remote signature workflow.

Additional required permissions || Required feature flag
User can view envelope list AutomaticRemoteSignature
User can create and send envelopes UseCustomizationId

User can get workstep link

Allows a user with the permission, to copy workstep links of recipient in the envelope detail/index.

Additional required permissions || Required feature flag
User can view envelope list

Templates

In this section you can find all available permissions which can be set for templates.

User can view template list

Allows a user with the permission, to access the template configuration pane. This permission should only be activated if the user is already allowed to view, create and send envelopes.

Additional required permissions || Required feature flag
Envelope templates

User can create new templates, edit and delete existing templates

Allows a user with the permission, to create new templates as well as edit and delete existing templates.

Additional required permissions || Required feature flag
User can view template list Envelope templates

Clipboard

In this section you can find all available permissions which can be set for the clipboard.

User can view, edit and delete clipboard list

Allows the user with the permission, to download the Microsoft Office Plugin as well as all actions which are allowed on the clipboard.

Additional required permissions || Required feature flag
User can view envelope list
User can create and send envelopes

Settings/Notification

In this section you can find all available permissions which can be set for the notification.

With this permission the user can enable notifications.

Additional required permissions || Required feature flag
User can create and send envelopes

Note: The permission notification is only for sender notification settings. The recipient notification settings are always visible.

Settings/Address book

In this section you can find all available permissions which can be set for the address book.

User can use address book in envelope creator

With this permission, the address book will be used as data source for autocomplete suggestions when editing envelopes.

User can view address book list

With this permission the user is allowed to view the address book entries.

User can create, edit and delete contacts

With this permission the user is allowed to edit, delete and add new address book entries.

Additional required permissions || Required feature flag
User can view address book list

Settings/Organization

In this section you can find all available permissions which can be set for the organization.

User can view organization settings

With this permission the user is allowed to see the organization settings (except eSealing profiles) as well as the user is allowed to download the current customizations or policies.

User can edit organization settings

With this permission the user can perform all actions on the organization (except eSealing profiles)

Additional required permissions || Required feature flag
User can view organization settings

Manage automatic eSealing profiles

With this permission the user can manage eSealing profiles.

Additional required permissions || Required feature flag
User can view organization settings AutomaticRemoteSignature
UseCustomizationId

Settings/Licensing

In this section you can find all available permissions which can be set for the license.

User can view licensing settings

With this permission the user is allowed to export organization statistics, to fetch organization statistics and the user is allowed to see the overview of the current license.

User can edit licensing settings

With this permission the user is allowed to change the license notification settings.

Additional required permissions || Required feature flag
User can view licensing settings

User can cancel organization account

With this permission the user is allowed to cancel the organization subscription and to cancel the organization.

Additional required permissions || Required feature flag
User can view licensing settings

Use buy page

Note: This permission is only available in SaaS.

With this permission the user is allowed to buy subscription for the organization.

Settings/Users

In this section you can find all available permissions which can be set for the users.

User can use user-list in envelope creator

With this permission the user can use the user-list when configuring a recipient for the envelope

User can view user list

With this permission the user is allowed to see the user list as well as the user can see the user settings.

User can create, edit and delete users

With this permission the user is allowed to edit, delete, create users and to add users from the address book.

Additional required permissions || Required feature flag
User can view user list

Automated delegation

With this permission the user is allowed to define a substitute which should receive the steps as a recipient instead.

Additional required permissions || Required feature flag
Delegation
DelegationWithAutomatedDelegation

Settings/Roles and Permissions

In this section you can find all available permissions which can be set for the roles and permissions.

User can view roles list

With this permission the user can see custom user roles and its permissions.

Additional required permissions || Required feature flag
CustomUserRoles

User can create, edit and delete roles or permissions

With this permission the user can add new custom roles, modify custom roles and clone custom roles.

Additional required permissions || Required feature flag
User can view roles list CustomUserRoles

Assign User Roles

With the permission “user can view user list” and this permission the user can assign standard roles to users. With the permission “user can view roles list” and this permission the user can assign custom roles to users.

Settings/Teams

In this section you can find all available permissions which can be set for the teams.

User can view, create, edit and delete teams

With this permission the user is allowed to manage teams.

Additional required permissions || Required feature flag
UserTeams

Settings/Localization

In this section you can find all available permissions which can be set for the localization.

User can view localization list

With this permission the user is allowed to view organization cultures.

User can add, activate/disable and delete languages

With this permission the user is allowed to manage organization cultures.

Additional required permissions || Required feature flag
User can view localization list

Settings/Email Templates

In this section you can find all available permissions which can be set for the email templates.

User can view and navigate through email templates

With this permission the user is allowed to view the template values and the user is also allowed to see the placeholder section.

User can view, edit, restore and customize email templates per language

With this permission the user is allowed to edit the email templates, to use the copy function of the placeholder section and to restore email templates.

Additional required permissions || Required feature flag
User can view and navigate though email templates

Settings/Signature Disclosure

In this section you can find all available permissions which can be set for the signature disclosure.

User can view, edit existing signature disclosures, add signature disclosure per language and allow to overwrite via Api

With this permission the user is allowed to manage the agreements.

Settings/Errors

In this section you can find all available permissions which can be set for the errors.

User can view and execute actions in error settings

With this permission the user is allowed to manage notification errors.