Roles

Users in an organization play different roles like system administrator, accountant, sales manager, project manager etc. and it is these roles that have privileges associated with them. Users who play a role automatically inherit the privileges granted to that role. In Celoxis too, you can define roles, assign privileges to roles and finally assign roles to the users. Privileges are never assigned to users directly but only through roles.

In Celoxis you have 2 types of roles

• User defined Roles
• System Roles

User defined Roles
These are roles that you can define based on the roles existing in your organization. You can assign users to these roles at the Company level, or you can define who plays a role at a specific Project level too.

System Roles
These are pre-defined in Celoxis and are referred to as 'system roles'. Let us look at the system roles 

• Administrator - Administrators are super users. They can manage users, roles, privileges, company settings, security, etc. 
• Staff - Every user plays this role. When you add a user, the user automatically plays a staff role. This is useful when you want to give privileges to everybody.

The next 4 roles are system roles but they are Contextual in nature. They work within the context of a project. 

• Project Manager - the person you assign to play the Manager role on a project is automatically assigned to this role
• Project Team - any users who are assigned to tasks automatically are part of the project team role for that project.
• Project Client - the client of a project is automatically assigned to this role 
• Task Team - users who are assigned to a specific task are part of the Task Team role

Privileges granted or denied to these roles work within the context of that specific project or task (in case of Task Team). The example below explains in further detail.

Example – For instance, a company wants to enforce a policy that only project managers should be able to "add tasks" to their projects i.e. if Joe and Mary are project managers of projects P1 and P2 respectively, then Joe should be able to "add tasks" to P1 but not to P2 and Mary should be able to "add tasks" to P2 and not P1. This is easily achieved by granting "add task" privilege to the Project Manager role.