Once a user is added to CDD Vault with one of the vault-level user roles, their access can be further refined at the project level. A user’s project role can be refined on the “Manage projects” tab using the “Edit Data” and “Manage” checkboxes. The “Edit Data” checkbox controls whether the user has their vault role permissions (checked) or whether they are limited to read access (unchecked). The “Manage” checkbox controls who can add or remove members to a project, control users' project permissions*, and delete the project (see How do I delete a project? for details). A Vault Admin always has permission to manage a project regardless of their project membership status.
* A user with the manage permission can self-grant the edit permission to that project.
Vault level role will determine what options are available at the project level.
- Users with a vault role of Read Export or below will be restricted to Read-Only at the project level by default.
- For all vault-level roles above Read Export, a user may add/edit project data to the extent that is permitted by his vault role.
For example, if a user has Read Add-Biology vault-level role, permission to add/edit project data will extend only to the user's own biological data, as described in the vault-level user role guide.
- For all vault-level roles above Read Export, a user can be granted permission to manage the project.
Only Vault Admin users can give project access to brand new vault members.
TIP: To create a user who can export search results, and download any attached file, but cannot add or edit any data, create a Read Add user at the vault level, but restrict his access to read-only at the project level.