Access rights

The access rights are specified on the teamboard level only, so there are not specific rights for particular work items or tasks.

The following rights are available for users, groups and the organization:

•	Read: the right to view a teamboard and all its work items and tasks;

•	Update: the right to update a work item, in particular to create, delete and update work item's tasks;

•	Create: the right to create a work item

•	Delete: the right to delete a work item;

•	Authorize: the right to change the authorization of the teamboard and to change the teamboard configuration.

•	Update own: the right to update a work item created by yourself;

•	Delete own: the right to delete a work item created by yourself.

The actual rights of a user to work with a particular teamboard are composed of the specific rights of this user plus the rights of all groups the user belongs to plus the rights of the organization.

To simplify the rights assignment they are grouped into access roles.

The table below specifies what access rights are necessary to perform certain operation. Note that the Teamboard creator role is a role assigned to a user by a User manager in the Engage Process Admin Center tool. It is not connected to any access rights. It only allows to create or delete the whole teamboard. Other roles are access roles.

Object	Operation	Rights	Roles having these rights
Teamboard	Create new		Teamboard creator
	Rename, Authorize, Configure	Authorize	Owner
	Delete	Authorize	Teamboard creator + Owner
	Open	Read	any
Work item	Add	Create	Owner, Editor, Author, Contributor
	Edit	Update or Update own	Owner, Editor, Author
	Archive	Update or Update own	Owner, Editor, Author
	Retrieve from archive	Update or Update own	Owner, Editor, Author
	Delete from archive	Delete or Delete own	Owner, Editor, Author
Task	Add Edit Delete	Update or Update own	Owner, Editor, Author
Table view	Configure columns	Authorize	Owner