Permissions and Roles
When you add a user to a project or group, you assign them a role. The role determines which actions they can take in IRIDA Next.
If you add a user to both a project’s group and the project itself, the higher role is used.
Roles
The available roles are:
- Guest
- Uploader
- Analyst
- Maintainer
- Owner
A user assigned the Guest role has the least permissions, and the Owner has the most.
The Uploader is to be used for api access for the uploader
All users can create top-level groups and projects.
Group Members Permissions
Any user can remove themselves from a group, unless they are the last Owner of the group.
The following table lists group permissions available for each role:
| Action | Guest | Uploader | Analyst | Maintainer | Owner |
|---|---|---|---|---|---|
| Create Group and Subgroups | ✓ | ✓ | |||
| Edit Group and Subgroups | ✓ | ✓ | |||
| Delete Group and Subgroups | ✓ | ||||
| View Group and Subgroups | ✓ | ✓ (2) | ✓ | ✓ | ✓ |
| Transfer Group and Subgroups | ✓ | ||||
| Add Group Member | ✓(1) | ✓ | |||
| Edit Group Member | ✓(1) | ✓ | |||
| Remove Group Member | ✓(1) | ✓ | |||
| View Group Members | ✓ | ✓ | ✓ | ✓ | |
| View Group Files | ✓ | ✓ | ✓ | ||
| Upload Group Files | ✓ | ✓ | |||
| Remove Group Files | ✓ | ✓ |
- A user with the Maintainer role can only modify members upto and including their role
- A user or bot account with the Uploader role can only perform these actions via the api
Subgroup permissions
When you add a member to a subgroup where they are also a member of one of the parent groups, they inherit the member role from the parent groups.
Project Members Permissions
-
Project Management:
Action Guest Uploader Analyst Maintainer Owner View Project ✓ ✓(1) ✓ ✓ ✓ Create Project ✓ ✓ Edit Project ✓ ✓ Delete Project ✓ Transfer Project ✓ View Project Members ✓ ✓ ✓ ✓ Add Project Member ✓(2) ✓ Edit Project Member ✓(2) ✓ Remove Project Member ✓(2) ✓ Add Bot Account ✓ ✓ Remove Bot Account ✓ ✓ Set up Automated Workflow Execution ✓ ✓ View Project History ✓ ✓ View Project Files ✓ ✓ ✓ Upload Project Files ✓ ✓ Remove Project Files ✓ ✓
- A user or bot account with the Uploader role can only perform these actions via the api
- A user with the Maintainer role can only modify members upto and including their role
-
Sample Management:
Action Guest Uploader Analyst Maintainer Owner View Samples ✓ ✓(1) ✓ ✓ ✓ Create Samples ✓(1) ✓ ✓ Edit Samples ✓(1) ✓ ✓ Delete Samples ✓ Transfer Samples ✓(2) ✓ Clone Samples ✓ ✓ Export Samples ✓ ✓ ✓ View Sample History ✓ ✓
- A user or bot account with the Uploader role can only perform these actions via the api
- A user with the Maintainer role can only transfer samples to another project under the common ancestor for the current project
-
Sample File Management:
Action Guest Uploader Analyst Maintainer Owner Upload Files ✓ ✓ Concatenate Files ✓ ✓ Download Files ✓ ✓ ✓ ✓ Delete Files ✓ -
Sample Metadata Mangement:
Action Guest Uploader Analyst Maintainer Owner Add Metadata ✓ ✓ Update Metadata ✓ ✓ Import Metadata ✓ ✓ Delete Metadata ✓ ✓