Enterprise role and permission management

This topic describes how to manage roles in the Qoder CN Enterprise Dedicated Edition. It covers built-in roles, creating and configuring custom roles, and assigning permissions to meet specific business needs.

​

Enterprise roles

Qoder CN provides built-in roles for efficient permission management, including predefined administrator and member roles for basic access control, and also supports custom roles for flexible, scenario-based permission management.

• Administrator roles: Include Owner, Global Administrator, and Qoder CN.
• Member roles: Include and External Member. All new users in your organization are assigned the role by default.
• Custom roles: You can create a custom role to grant granular permissions for specific features, including Knowledge Management, extension management, filter & model configuration, authorization, and the dashboard.

The permission configuration for the Qoder CN Administrator role includes two parts. Organization Management permissions: For Member Management, select "Set as Qoder CN Administrator" and "View the Member Management page". For Role Management, select "View the Role Management page". For User Group Management, select "View the User Group page". For Security Management, select "View/Export Operation Logs". Qoder CN permissions: For Authorization, select "Manage authorized developers". For Dashboard, select "View Dashboard (and data)". For Knowledge Management, select "View all knowledge bases".

​

Create and configure custom roles

1. Go to the Role Permissions page: Go to the Qoder CN enterprise management console, click in the left navigation bar to open the Organization Management page, and then click Role Management to go to the Role Permissions management page.
2. Create a custom role. On the Role Permissions page, you can create specific roles based on your requirements.The following sections demonstrate how to create a custom role, using the Enterprise Knowledge Base Administrator and Enterprise Dashboard Administrator roles as examples.

​

Custom knowledge base administrator

​

Create the administrator role

1. Create a role: In the Custom Roles section, click Create Role, enter a role name, such as Enterprise Team Knowledge Base Administrator, and click Create.
2. Set permissions for a role: Select the required permissions for the role and click Save Configuration. The following are common knowledge base administrator roles, their permissions, and descriptions.

   Enterprise Team Knowledge Base Administrator (Recommended)

   | Scenarios | Use this role to isolate management permissions for knowledge bases. This ensures each administrator can only view, create, and manage content in private knowledge bases within their authorized scope and in all public knowledge bases. | |---|---| | Permission settings | In Knowledge Management, select only the Create knowledge base permission. | | Permission description |
   • Can access the Knowledge Management page.
   • Can create knowledge bases.
   • Can view and manage (including editing and deleting) only the private knowledge bases within their authorized scope.
   • Can view and manage (including editing and deleting) all public knowledge bases.
   |

   Global Knowledge Base Administrator

   | Scenarios | Use this role to view, create, and fully manage all public and private knowledge bases in your organization. | |---|---| | Permission settings | In , select the following four permissions:
   • View all knowledge bases.
   • Create knowledge base.
   • Delete all knowledge bases.
   • Modify all knowledge bases.
   | | Permission description |
   • Can access the Knowledge Management page.
   • Can create knowledge bases.
   • Can view and manage (including editing and deleting) all private and public knowledge bases.
   |
3. Grant permissions to members: Go to the page for the custom role. Click the Role Members tab, and then click Add Member in the upper-right corner. Add the target users to grant the role permissions. After the role is granted, the members can access the Knowledge Management page. To assign the Enterprise Team Knowledge Base Administrator role, select it from the custom role list on the left. Click Add Member in the upper-right corner. In the dialog box that appears, select the target members from the department tree and click Add to assign the members.

​

Configure private knowledge base administrators

After creating and authorizing a custom role, the member can access the Knowledge Management page. However, if the custom role is an Enterprise Team Knowledge Base Administrator, the member cannot yet view and manage specific private knowledge bases. You must also assign the administrator role for that knowledge base to the member. A Qoder CN, an Enterprise Administrator, or an administrator of the target knowledge base can perform this operation. The steps are as follows:

1. Click the page and select the target private knowledge base.
2. On the Member List tab, click Add Member to add a new administrator, or select an existing member and assign them the role. The members can then view and manage the private knowledge base.

​

Custom dashboard administrator

1. Create a role: In Role Permissions , click . Enter a role name, such as Dashboard Administrator, and click Create.
2. Set permissions for the role: Select the View dashboard (and data) permission and click Save Configuration.
3. Grant permissions to a member: Go to the custom role page. Click the Role Members tab. Click Add Member in the upper-right corner. After the permissions are granted, the member can go to the dashboard page to view the dashboards and data.