all | bool | 1 | Specifies all flags set; Including any future flags. |
full_control | bool | 2 | Can perform any activity in the vault. |
can_log_in | bool | 3 | Can log in to the vault. |
can_create_objects | bool | 4 | Can create new documents. |
can_see_all_objects | bool | 5 | Sees all documents in listings, regardless of security settings and deletion state. |
can_undelete_objects | bool | 6 | Can undelete previously deleted documents. |
can_destroy_objects | bool | 7 | Has permission to permanently destroy documents. |
can_force_undo_checkout | bool | 8 | Has permission to undo a check-out performed by another user. |
can_change_all_object_permissions | bool | 9 | Can change the security settings of all documents and modify all documents. |
can_change_metadata_structure | bool | 10 | Can modify the meta data structure of the vault (propertydefs, profiles, value lists etc.). |
can_manage_users | bool | 11 | Can create, edit and delete user accounts. Cannot add or remove the Vault Manager role. |
is_internal_user | bool | 12 | An internal user of the vault. This role separates internal enad external users in the vault. |
can_manage_traditional_folders | bool | 13 | Can create, modify and delete traditional folders.
OBSOLETE: const VAULTROLES VAULTROLE_DEFINE_TEMPLATES = 1 << 12; //!< Can define templates. |
can_manage_common_views | bool | 14 | Can create, modify and delete common views. |
can_manage_workflows | bool | 15 | Can create, modify and delete workflows. Modifying event handlers within the workflow still requires SERVERACCESS_RUN_CODE. |
cannot_manage_private_views | bool | 16 | Cannot create or modify private views. |
anonymous | bool | 17 | Anonymous role. |
run_code_on_server | bool | 18 | Can run code on the server hosting this vault. Not included in VAULTROLE_FULL_CONTROL, and cannot be ordinarily granted by it. |
