Roles and Permissions

The Autodesk Vault server is a secure database. A user must have an account to access data and must be assigned appropriate user permissions. Permissions are assigned based on roles.

When more than one role is assigned, the permission set is the union of the roles, extending the permissions of the user or group.

Refer to the following table for more information about the Roles available in Autodesk Vault.

Role	Details
Administrator	Full privileges within to all folders all the time and administrative privileges on the server, including ERP and Job Server rights.
Change Order Editor Level 1 Note: Available in Autodesk Vault Professional.	Create, edit, participate, and read change orders. Note: These permissions previously existed in the Item Editor Level 1 & 2, Item Reviewer, and ERP Manager roles and have been removed so that only the Change Order Editor and Administrators can create or largely modify change orders. Upon migration, all users assigned Item Editor, Item Reviewer, and ERP Manager roles will also be assigned the Change Order Editor role.
Change Order Editor Level 2 Note: Available in Autodesk Vault Professional.	Any user with the Change Order Editor Level 2 or Administrator roles will be able to Add or Remove from an ECO in Approved status. The existing Add and Remove buttons, and the Add Related right click menu will be enabled on the Records tab for ECOs in Approved status.
Configuration Administrator Note: Available in Autodesk Vault Professional.	Configure Vault object and management settings including Files, Visualization, behaviors (e.g., properties and lifecycle), Items and Change Order settings. Cannot create and modify users.
Content Center Administrator	Full privileges within the Content Center, and library management privileges on the server (within the server console). These privileges include create, delete, import, export, and defragment libraries. This role does not apply to Civil 3D users.
Content Center Editor	Full privileges within the Content Center, but no administrative privileges on the server (within the server console). This role does not apply to Civil 3D users.
Custom Object Consumer Note: Available in Autodesk Vault Professional.	Read-only access to Custom Objects only.
Custom Object Editor Level 1 Note: Available in Autodesk Vault Professional.	Basic Custom Object adding and editing privileges within the vault, and add/remove Custom Object user-defined properties privileges. Cannot delete Custom Objects. Does not have administrative privileges on the server.
Custom Object Editor Level 2 Note: Available in Autodesk Vault Professional.	Full privileges within the vault, as well as add/remove Custom Object user-defined properties. Does not have administrative privileges on the server.
Custom Object Manager Level 1 Note: Available in Autodesk Vault Professional.	Privileges to change category, lifecycle, and revision assignments, and to edit user-defined properties.
Custom Object Manager Level 2 Note: Available in Autodesk Vault Professional.	Full file behavior management privileges within Autodesk Vault, including the ability to add, remove, and edit user-defined properties. This role does not have the ability to create behavior definitions.
Document Consumer Note: Available in Autodesk Vault Workgroup and Vault Professional.	Read-only access to files and folders only, including the job server queue.
Document Editor Level 1 Note: Available in Autodesk Vault Workgroup and Vault Professional.	Basic file adding and editing privileges within the vault, also add/remove file and folder user-defined properties, but cannot delete files and folders. No administrative privileges on the server.
Document Editor Level 2 Note: Available in Autodesk Vault Workgroup and Vault Professional.	Full privileges within the vault, also add/remove file and folder user-defined properties, but no administrative privileges on the server.
Document Manager Level 1 Note: Available in Autodesk Vault Workgroup and Vault Professional.	The privileges to change category, lifecycle, and revision assignments, and to edit user-defined properties.
Document Manager Level 2 Note: Available in Autodesk Vault Workgroup and Vault Professional.	Full file, folder, and custom object behavior management privileges within Autodesk Vault, including the ability to add, remove, and edit user-defined properties. This role does not have the ability to create behavior definitions.
ERP Manager Note: Available in Autodesk Vault Professional.	Performs ERP tasks: Configure and manage the MSMQ DWF queue settings Import ERP: Import an item from an ERP system into Professional Export ERP: Export items for use with an ERP system.
Item Editor Level 1 Note: Available in Autodesk Vault Professional.	Basic file and item privileges within Professional, but cannot delete files, folders, or items. No administrative privileges on the server.
Item Editor Level 2 Note: Available in Autodesk Vault Professional.	Full privileges within Professional except for change orders. No administrative privileges on the server.
Item Reviewer Note: Available in Autodesk Vault Professional.	Read-only access to items, files, and folders.
Project Administrator Note: Available in Autodesk Vault Professional.	Manage project settings for all object types. This includes delete operations, both conditional and unconditional, and removing file reservations.
Security Administrator Note: Available in Autodesk Vault Professional.	Configure security settings for all object types. This includes files, folders, items and custom objects. This role also has the ability to see objects that are cloaked and modify the permissions.