817ccf3620
* Add Quickstart Guide * Update installation * Remove unused files * Update support/backing * Tweaks in concepts * Setup file structure for API reference 2.0 * Setup page layout for reference * Add clean-urls plugin * getting started updates * Finish authentication rest * getting started updates * Render stylus in 2 spaces * Various * Various * Finish activity docs * Add collections reference * Add extension reference * concepts updates * Fields/tweaks * Add files doc * Add revisions * concepts docs * More api reference * Finish rest api reference (finally) * initial concepts * More things * Add assets api ref * Move sections from file to assets * Add environment variables * contributing docs * Add field transforms page * Left align table headers * concept links * Add API config * Fix mobile nav * Add migrating a project * doc link fixes Co-authored-by: Ben Haynes <ben@rngr.org>
1.7 KiB
Roles
Roles define a specific set of access permissions, and are the primary organizational structure for Users within the platform.
Each User is assigned a single Role which determines their Permissions within the App and API. Roles also include options for configuring platform access, Two-Factor Auth, Module Navigation, and Collection Navigation. You can create an unlimited number of roles, so organize your users in whatever way feels most appropriate.
Two default roles, Public and Administrators, are available after installing a clean copy of Directus.
Relevant Guides
- Creating a Role
- Configuring a Role
- Configuring Role Permissions
- Configuring System Permissions
- Deleting a Role
Public Role
Not technically a role, "Public" can't be found in the directus_roles table. Instead, it represents the lack of a role, providing a place to configure permissions for unauthenticated users. This role can not be deleted.
::: warning Private by Default
All of the data within Directus is private by default. Permissions within the public role can be added by administrators on a case-by-case basis.
:::
Administrators Role
During the installation process, Directus automatically creates an "Administrators" Role, which is used to provide the initial admin user with full platform access. However this is just a normal role, and so it can still be updated, renamed, or even deleted. Keep in mind that your project must maintain at least one role with Admin Access at all times.