Table of Contents
Permission Sets
Table of Contents
Permission sets assign multiple user roles to content or schema and allow you to control the level of access those roles have to it. Permission sets applied to content/schemas are additive; all of them apply. Default content permission sets that are added to a content item on creation can be added by Fotoware.
Permission set permissions define which user roles can manage and apply the permission sets to content and schemas.
Permission sets can be set exclusively, meaning only this one exclusive Permission Set is applied. Exclusive Permission Sets are additive too, which means the combined set of permissions from all exclusive Permission Sets applies.
Create a Content Permission Set
- Open Content permission sets
- Click create
- Provide name
- Set exclusive, meaning overwriting all other permissions when applied e.g. for embargo or archival.
- Save
After Creating the Content Permission Set
- On the right side, set Role Permissions (permission level per role, e.g., only admins can view, edit & delete)
- On the left side, set Permission Set Permissions (which role can apply this permission set, e.g., only admins can apply and manage this permission set)
Creating a content permission set for embargo content, only applicable by admins, where the content items are only available to admins.
Create a Schema permission set
- Open Schema permission sets
- Click create
- Provide name
- Set exclusive, meaning it overwrites all other permissions when applied, e.g., for embargo or archival use.
- Save
After Creating the Schema Permission Set
- On the right side, add Role Permissions (permitted content modifications per role, e.g., product can manage the schema, dealers can view the schema and its items)
- On the left side, add permission set permissions (permitted access to this specific permission set per role, e.g., product can apply the schema permission set)
Schema permission set to manage a product list, with product-managing items and dealers only viewing items.
Add Permission Set to Schema
- To add a schema permission set to a schema :
- Open Schemas
- Find your schema and double-click to open the details.
- On the right side, find “Permissions”.
- Add one or multiple Permission Sets
- Validate the permissions using the matrix.
- Save.
* Disable the View for all button, which grants the View for all permission by default on schema creation.
How to Add Permission Set to a Schema (List, Layer):
Checking the Effective Permissions on a Schema
After adding permissions to a schema, you can check the effective permissions using the permission matrix. There you see the (1) applied permission sets with exclusive ones listed in the permission set name, and you find the matrix (2) which shows how these permission sets are combined and which permissions are active on the schema, e.g., in the example, Editor Corporate does not have access anymore.

- Open the Permissions and find the permission matrix.
- Use the switches next to the Permission Sets to check the effects of disabling/unassigning them.
How to Check Permission Using Matrix by showing and hiding permission sets.
General Remarks
The advanced view of the permissions applied to a Content Item is unrestricted and visible to all users who have access to the content item. Note this is for display only and does not remove Permission Sets from the schema itself.
Permission Matrix

As you can see in the example above, there are three permission sets applied to this schema, and the default “View for all”. As you can see, the applied permission sets build on each other. The effective permissions are displayed in the matrix. I can also see what they would be if I removed the permission set, for example, by turning the slider on or off for each permission set. Note this is for display only and does not remove permission sets from the schema itself.
In the case of exclusive permission sets, these will negate any non-exclusive permission sets applied. In this example, I have added a Schema managed by product | Exclusive permission set to the example above. As you can see, the negated permissions are denoted with a red cross:

If View for all is also enabled, this effectively gives all users View permission on the schema.
Access Permission Set in Search or Filter
The Permission Sets of a Content Item are saved in a field called:
permissionSetIds
Therefore you can access Permission Sets via this field in Display Pattern, Filter, Query Filter, or searches.
| Case | Value |
|---|---|
| Exact Match | permissionSetIds:GUID |
| Has Permission Set Assigned | _exists_:permissionSetIds |
| Has No Permission Set Assigned | -_exists_:permissionSetIds |
Solutions
Access Permission Set in Sidebar Filter
Some default system fields are used to aggregate IDs from the Fotoware Alto system items, e.g., permissionSetIds, layerSchemaIds, or contentSchemaId, and display them in Filters.
- Open Filters
- Add a new Filter
- Select Permission
- Save

Update a Permission Set
- Open Permission
- Select Permission Set
- Update
- Save
Update View for All or Exclusive
Enabling View for all in the schema settings applies View Permission to the Schema for all users.
View for all is independent of applied permission sets. Note that exclusive permission sets will not turn off View for all. If you are applying an exclusive permission set that is intended to "turn off" other non-exclusive permissions, remember to also disable View for all.
Remove all Permission Sets from Content
- Open the Content Item
- Unassign permission sets one by one
- See "View for all" still switched on (not affected by "Remove All" function)
VIDEO: How to Remove all Permission Sets from Content
Unassign permission sets one by one.
Delete a Permission Set
- Open Content Permission Set or Schema Permission Set
- Select your Permission Set
- Look for the delete icon
- Choose delete from the context menu, the toolbar in the browser, or the detail view
- Confirm your desire to delete.
You cannot delete a permission set that is still in use.
Delete Content Assigned to a Permission Set
To find the Content Items assigned to a Permission Set (Content),you can filter or search in the Content Browser.