Permissions

Features and access to Contour is defined by the user group(s) that a user belongs to. Contour has a number of pre-defined organization user groups and project user groups. The Organization Administration and Project Configuration sections allow administrators to grant user groups access to the Project.

•	Organization Group - Groups that are created with no context of a Project (i.e. in the Organization Administration "User Groups" link) will be available to all projects in the Organization when adding permissions.

•	Project Group - Groups that are created in context of a Project (i.e. in Project Configuration or when selecting a Project in the Permissions link of the Organization Administration) will be available to the specific Project when adding permissions.

Contour stores users in an internal database by default or can connect to an external LDAP, Active Directory or Crowd user database. Users may be assigned directly to one or more Projects, Components, or Sets or may be assigned to user groups, which are assigned to Projects.

Steps to setup users and security:

1.	Create user groups (This is optional but is faster than configuring security for every user)

2.	Assign users to one or more groups

3.	Open Projects and assign users and groups access rights

Access Level	Description
System Admin / Root	Reserved only for the system root user to perform system configuration. This account does not have access to work on Projects. Other users can not be granted any root level user permissions.
Administrator	Provides access to all Projects within an Organization as well as ability to configure the Organization and manage security.
Manage Project	Allows users full control over a specific Project or all Projects when assigned at the Organization level. Users or Groups with this role have access to the Project Settings functionality. Requires license type Named or Floating.
Create/Edit – Project Level	Provides visibility to a Project and may create, edit and delete Items within the Project. Requires license type Named or Floating.
Read – Project Level	Provides rights to read Project data, create Filters and leave comments.
Create/Edit - Component Level	Assigned user will have visibility to the Component and may create, edit and delete Items within the assigned Component. Requires license type Named or Floating.
Read - Component Level	Assigned have rights to read Component data, create Filters and leave comments.
Create/Edit – Set Level	Assigned user will have visibility to the Set and may create, edit and delete Items within the assigned Set. Requires license type Named or Floating.
Read – Set Level	Assigned have rights to read Set data, create Filters and leave comments.
No Access	While not a specified permission within a Project or set, denying access to a User or Group is attainable by not assigning any of the above permissions.