Every system comes with several pre-configured system roles. System roles cannot be deleted, but almost all can be modified.
Admin
The Admin role is a vital system role and cannot be modified, renamed or deleted. Users with this role can see all managed projects and assets and have all role capabilities enabled by default. Only users with this role can log in to the admin panel.
Share
The Share role is a vital system role and cannot be renamed or deleted, but its capabilities can be modified by an Admin. The role is a crucial role of the Skies cloud infrastructure because users with this role do not occupy paid seats when using the cloud infrastructure. When a user shares a media asset via email and the email receiver is not yet a system user, the email receiver automatically gets the “Share” role associated with his or her email address. The role, however, has a minimal set of capabilities. Users with this role can not log in to any frontend except for Email links directly shared with them. Please check the role’s capabilities on your system to see which capabilities are available & enabled for this role.
Super User
The Super User role is a vital system role and cannot be renamed or deleted but its capabilities can be modified by an Admin. By default, this role has almost all capabilities enabled. Please check the role’s capabilities on your system to see which capabilities are enabled.
User
The User role is a vital system role and cannot be renamed or deleted but its capabilities can be modified by an Admin. Please check the role’s capabilities on your system to see which capabilities are enabled.
Guest
The Guest role is a vital system role and cannot be renamed or deleted but its capabilities can be modified by an Admin. Please check the role’s capabilities on your system to see which capabilities are enabled.
Default Role Capability Matrix
The following roles are shipped with every new Strawberry installation. All roles, except for the Admin role, can be modified by Starwberry administrators.
| Projects & General | Admin | Super User | User | Guest | Gallery User | Share via Email User |
| Can login to the admin panel | x | |||||
| Can login to client application | x | x | x | x | ||
| Can login to the PAM web interface using a web browser | x | x | x | x | x | |
| Can access the Galleries UI | x | x | x | x | ||
| Can create new projects | x | x | x | x | ||
| Can see users and teams | x | x | x | x | ||
| Can share projects with own teams and their members | x | x | x | |||
| Can share projects with other teams and users | x | x | x | |||
| When a user with this capability creates a project, it is automatically assigned to all teams they are a member of. | ||||||
| Can assign projects to quota teams | x | x | x | |||
| Can archive own projects | x | x | x | |||
| Can retrieve own projects | x | x | ||||
| Can archive other people’s projects | x | x | ||||
| Can retrieve other people’s projects | x | x | ||||
| Can use “copy to..” on own projects | x | x | x | |||
| Can use “copy to..” on other people’s projects | x | x | ||||
| Can transfer projects to other sites | x | x | ||||
| Can freeze/melt own projects | x | x | x | x | ||
| Can freeze/melt other people’s projects | x | x | ||||
| Can modify metadata of projects without write access | x | x | ||||
| Can reindex projects (including Libraries) | x | x | x | |||
| Can rename projects | x | x | ||||
| Can delete projects | x | x | ||||
| Assets | ||||||
| Can delete assets and folders via user interface | x | x | ||||
| Can use “copy to..” on assets | x | x | x | |||
| Can share assets via email | x | x | x | x | ||
| Can define custom expiration dates for “Share via Email” links | x | x | ||||
| Can download proxy version of assets via Skies | x | x | x | x | ||
| Can download HiRes version assets via Skies | x | x | x | |||
| Can upload HiRes version assets via Skies | x | |||||
| Can revoke share link access | x | x | ||||
| Can re-create proxy files | x | x | x | |||
| Can track down assets | x | x | x | |||
| Can modify custom asset metadata | x | x | x | |||
| Can set and modify asset expiration dates | x | x | ||||
| Can retrieve individual assets from own projects | x | x | x | |||
| Can retrieve individual assets from other people’s projects | x | x | x | |||
| Can modify the metadata of read-only assets | x | |||||
| AI Transcriptions | ||||||
| Generate AI Transcriptions | x | x | x | |||
| Download transcripts | x | x | x | |||
| Modify transcripts | x | x | x | |||
| Delete transcripts | x | x | ||||
| Comments & Descriptions | ||||||
| Can comment on projects | x | x | x | x | ||
| Can add asset descriptions | x | x | x | x | x | x |
| Can comment on assets | x | x | x | x | x | x |
| Can download comments | x | x | x | x | x | x |
| Can modify & delete comments of other users | x | x | ||||
| Can mention other users in description fields and comments | x | x | x | x | ||
| Galleries | ||||||
| Can Create Galleries | ||||||
| Can submit assets to joined Galleries | x | x | x | |||
| Can submit assets to all Galleries | x |