Permissions


Permissions define the set of actions that users can perform with the data that is accessible to them (e.g., download, edit, view).

Permission Flags

User permissions are achieved through a set of fine-grained flags that team administrators can use to manage what actions users can perform with the data they can access. Permissions are divided into several categories of privileges that span actions at team level, image level, folder level, and file level.

All entries in the Repository that are detected as a supported image format are treated as an “Image” type and have dedicated permissions flags. All other entries in the Repository (e.g., reports, Figures, attachments) are treated as “Files” and also have dedicated permissions.

Team Permissions

The following flags govern team administration.

FlagDescription
Manage usersAllows a user to view, edit, create or delete Users.
Manage rolesAllows a user to view, edit, create or delete Data Groups and Roles.
Manage fieldsAllows a user to view, edit, create or delete Fields and Field Sets.
Manage report templatesAllows a user to view, edit, create or delete Report Templates.
Manage assignment rulesAllows a user to view, edit, create or delete assignment rules for cases.
Manage uploaded filesAllows a user to view or create unsorted uploads.
Manage teamAllows a user to edit the Team Settings.
Export activitiesAllows a user to export detailed Activity Logs.
Preview activitiesAllows a user to access the Activities tab.
Manage policiesAllows a user to view, edit, create or delete policies.

Image Permissions

The following flags govern all entries in the Repository that are detected as a supported image format. The entries are treated as images and given the Image type.

FlagDescription
ViewAllows a user to view an image and its metadata including fields, snapshots, overlays.
View shared annotationsAllows a user to view shared annotations on an image to which they have access.
Create shared annotationsAllows a user to create and delete shared annotations and change the state of a private annotation, which the user has created, to shared.
Create private annotationsAllows a user to create private annotations.
DownloadAllows a user to download an image or attachment.
Edit metadataAllows a user to:
- Edit image metadata fields
- Edit image description
- Edit, create, or delete image overlays
- Edit, create, or delete image snapshots
- Edit or delete any user’s shared annotations
- Set default image rotation
Manage share linksAllows a user to edit, create, or delete share links for images.
View shared image settingsAllows a user to save private image settings and see collections of image settings shared by other members of their team.
Share image settingsAllows a user to share image settings with the rest of their team.
"View shared image settings" is a prerequisite for this permission, and it does not appear until that permission is granted.
Manage image settingsAllows a user to change the preferred and shared status of all image settings for their team.
"Share image settings" is a prerequisite for this permission, and it does not appear until that permission is granted.

Folder Permissions

The following flags govern folders in the Repository and/or Cases in the Dashboard.

FlagDescription
ViewAllows a user to view the Repository and its folders, and cases.
CreateAllows a user to create folders and cases.
Edit metadataAllows a user to edit folder-level Fields and case reports.
Manage share linksAllows a user to edit, create or delete share links for folders.
DeleteAllows a user to delete folders.

File Permissions

The following flags govern all entries in the Repository that are not detected as an image (e.g., reports, Figures, attachments). The entries are treated as files and have dedicated permissions.

FlagDescription
ViewAllows a user to view attachments, snapshots, reports and report templates.
UploadAllows a user to upload files, generate reports and link DICOM resources from a connected PACS into folders.
Edit metadataAllows a user to edit Fields for non-image files and reports, and run type detection on a file.
Manage share linksAllows a user to edit, create, or delete share links for non-image files.
DeleteAllows a user to delete all files (including image files).

Protected Health Information (PHI) Flags

The following flags govern metadata Fields.

FlagDescription
ViewAllows a user to view field values that have been marked with the Protected Health Information (PHI) flag and slide labels.