# VaultAccess

Location: [gRPC API](https://developer.m-files.com/APIs/gRPC-API/index.md) > [Reference](https://developer.m-files.com/APIs/gRPC-API/Reference/index.md) > [Messages](https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/index.md)

HTML version: https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/MFiles.VaultAccess/

Vault access rights (bitfields).

- **Full name:** `MFiles.VaultAccess`
- **Proto file:** [`mfiles/enums.proto`](https://developer.m-files.com/APIs/gRPC-API/downloads/proto/mfiles/enums.proto)

<a id="fields"></a>

## Fields

| Field | Type | Number | Description |
|---|---|---|---|
| <a id="f-all"></a>`all` | `bool` | 1 | Specifies all flags set; Including any future flags. |
| <a id="f-create_objects"></a>`create_objects` | `bool` | 2 | Create a new document. |
| <a id="f-see_all_objects"></a>`see_all_objects` | `bool` | 3 | See all documents (including deleted ones). |
| <a id="f-undelete_objects"></a>`undelete_objects` | `bool` | 4 | Undelete documents. |
| <a id="f-destroy_objects"></a>`destroy_objects` | `bool` | 5 | Destroy documents. |
| <a id="f-force_undo_checkout"></a>`force_undo_checkout` | `bool` | 6 | Force undo check-out. |
| <a id="f-change_object_permissions"></a>`change_object_permissions` | `bool` | 7 | Change documents' security settings. |
| <a id="f-change_metadata_structure"></a>`change_metadata_structure` | `bool` | 8 | Change meta data structure. |
| <a id="f-manage_users"></a>`manage_users` | `bool` | 9 | Manage user accounts. |
| <a id="f-change_full_control_role"></a>`change_full_control_role` | `bool` | 10 | Add/remove the full control role. OBSOLETE: const VAULTACCESS VAULTACCESS_MANAGE_OWN_VIEWS = ( 1 << 9 );  //!< Add/remove user-specific views. |
| <a id="f-verify_vault"></a>`verify_vault` | `bool` | 11 | Verify and/or fix vault. |
| <a id="f-edit_and_delete_all_objects"></a>`edit_and_delete_all_objects` | `bool` | 12 | Modify all documents (excluding changing security settings). OBSOLETE: const VAULTACCESS VAULTACCESS_MARK_FOR_ARCHIVING = ( 1 << 12 );  //!< Mark documents for archiving or clear archive markers. |
| <a id="f-archive"></a>`archive` | `bool` | 13 | Archive documents or old versions of documents. |
| <a id="f-restore_from_archive"></a>`restore_from_archive` | `bool` | 14 | Restore contents from an archive. OBSOLETE: const VAULTACCESS VAULTACCESS_SEE_VALUELISTS_CONTENTS = ( 1 << 15 );  //!< See the contents of value lists. |
| <a id="f-manage_value_list_items_from_client"></a>`manage_value_list_items_from_client` | `bool` | 15 | Manage (e.g. add, modify, remove) value list items from client side. |
| <a id="f-manage_external_locations"></a>`manage_external_locations` | `bool` | 16 | Add/modify/remove external locations. |
| <a id="f-license_allows_modifications"></a>`license_allows_modifications` | `bool` | 17 | The license of the user allows modifications. |
| <a id="f-manage_events"></a>`manage_events` | `bool` | 18 | Enable or disable event logging, delete a range of events, and get all events of the vault. |
| <a id="f-manage_traditional_folders"></a>`manage_traditional_folders` | `bool` | 19 | Can create, modify and delete traditional folders. OBSOLETE: const VAULTACCESS VAULTACCESS_DEFINE_TEMPLATES = ( 1 << 21 );  //!< Can define templates. |
| <a id="f-change_object_states"></a>`change_object_states` | `bool` | 20 | Can change the state of an object regardless of the state's ACL. |
| <a id="f-change_assignments"></a>`change_assignments` | `bool` | 21 | Can modify all assignment information. |
| <a id="f-manage_common_views"></a>`manage_common_views` | `bool` | 22 | Can create, modify and delete common views. |
| <a id="f-manage_common_uisettings"></a>`manage_common_uisettings` | `bool` | 23 | Can manage common display (UI) settings. OBSOLETE: const VAULTACCESS VAULTACCESS_SEE_USERS_AND_GROUPS = ( 1 << 26 );  //!< Can see the contents (names) of the Users and User Groups lists. |
| <a id="f-manage_common_notification_rules"></a>`manage_common_notification_rules` | `bool` | 24 | Can create, modify and delete common notification rules. |
| <a id="f-see_deleted_objects"></a>`see_deleted_objects` | `bool` | 25 | Sees deleted objects. However, seeing a deleted object requires the user to have read access to the object or the vault-level SeeAllDocs access right. |
| <a id="f-materialize_views"></a>`materialize_views` | `bool` | 26 | Can materialize views. |
| <a id="f-manage_workflows"></a>`manage_workflows` | `bool` | 27 | Can create, modify and delete workflows. |
| <a id="f-read_all_metadata_structure"></a>`read_all_metadata_structure` | `bool` | 28 | Read meta data structure. |
| <a id="f-manage_private_views"></a>`manage_private_views` | `bool` | 29 | Can create and modify private views. |
| <a id="f-manage_private_notification_rules"></a>`manage_private_notification_rules` | `bool` | 30 | Can create and modify private notification rules. |
| <a id="f-run_signed_code"></a>`run_signed_code` | `bool` | 31 | Can run signed code. |
| <a id="f-manage_scheduled_jobs"></a>`manage_scheduled_jobs` | `bool` | 32 | Can manage scheduled jobs. |
| <a id="f-trigger_data_export"></a>`trigger_data_export` | `bool` | 33 | Can trigger data export jobs. |
| <a id="f-generate_event_logs"></a>`generate_event_logs` | `bool` | 34 | Can generate event logs. |

<a id="used-in-fields"></a>

## Used in fields

- [`EventTypeSpecificDataUnion.LoggedInData.vault_access`](https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/MFiles.EventTypeSpecificDataUnion/index.md#t-LoggedInData-vault_access): The session's vault-level access rights.
- [`SessionAccess.vault_access`](https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/MFiles.SessionAccess/index.md#f-vault_access): The session's vault-level access rights.