Introduction
When creating or modifying a role, Administrators are presented with a permission matrix, also known as role capabilities. This chapter explains the purpose of each of those capabilities.
Projects & General
Can log in to the client application
Users with this role capability can log in to the Strawberry desktop client application and mount projects. This capability is required for creative users who need to work with media on shared storage.
Can log in to the PAM web interface using a web browser
Users with this capability can log in to the Strawberry PAM UI with a web browser to manage projects and their contents. This capability is recommended for producers and other stakeholders who need access to unedited footage, such as rushes and b-roll content.
Can access the Galleries UI
Users with this capability can log in to the Galleries UI. This capability is recommended for internal and external reviewers in approval workflows.
Can create new projects
Users with this capability can create new projects either from the Strawberry desktop client or from a web browser.
Can see users and teams
This capability is the base requirement for users to see other users and teams in the system. When this capability is disabled, users with this role will not see other users and teams and cannot assign projects to them.
Can share projects with own teams and their members
Users with this capability can share projects with teams they are members of, as well as with individual members of those teams.
Can share projects with other teams and users
Users with this capability can share projects with all teams and their members.
When a user with this capability creates a project, it is automatically assigned to all teams they are a member of.
This is a comfort feature to save clicks. When a user with this capability creates a new project, the project is auto-assigned to all teams the user is a member of. The user can change the assignment during or after project creation.
Can assign projects to quota teams
Users with this capability can assign projects to quota teams, defining which team is responsible for the storage size of these projects. This is relevant when you want to track storage consumption on a per-team basis.
Can archive own projects
Users with this capability can archive projects that they have created.
Can retrieve own projects
Users with this capability can retrieve projects that they have created from the archive.
Can archive other people’s projects
Users with this capability can archive all projects, regardless of who created them.
Can retrieve other people’s projects
Users with this capability can retrieve any project from the archive, regardless of who created it.
Can use “copy to..” on own projects
bc. Users with this capability can use “copy to..” on projects that they have created.Can use “copy to..” on other people’s projects
bc. Users with this capability can use “copy to..” on any project, regardless of who created it.Can transfer projects to other sites
This capability is only relevant for multisite systems. Users with this capability can transfer projects between sites of the multisite federation.
Can freeze/melt own projects
Users with this capability can freeze and melt projects that they have created.
Can freeze/melt other people’s projects
Users with this capability can freeze and melt any project, regardless of who created it.
Can modify metadata of projects without write access
Users with this capability can change the metadata of projects they don't have write access to.
Can reindex projects (including Libraries)
Users with this capability can perform manual reindex operations on projects from the Strawberry user interface. Please note that Strawberry automatically reindexes projects at a customizable interval, with a default of 5 minutes.
Can rename projects
Users with this capability can rename projects from the Strawberry user interface.
Can delete projects
Use with caution! Users with this capability can delete projects from the Strawberry UI and the storage.
Assets
Can delete assets and folders via user interface
Use with caution! Users with this capability can delete assets from the Strawberry UI and the storage.
Can use “copy to..” on assets
Users with this capability can perform "copy to.." operations on assets from the Strawberry UI.
Can share assets via email
Users with this capability can share assets via email from the Strawberry UI.
Can define custom expiration dates for “Share via Email” links
Users with this capability can define a custom expiration date for assets they share via email.
Can download proxy version of assets via Skies
When connected via Skies, users with this capability can download preview proxy versions of media assets.
Can download HiRes version assets via Skies
When connected via Skies, users with this capability can download original versions of media assets.
Can upload HiRes version assets via Skies
When connected via Skies, users with this capability can upload media assets to projects they have write access to.
Can revoke share link access
Users with this capability can revoke the share links for assets shared via email.
Can re-create proxy files
Users with this capability can re-create preview proxies for assets from the Strawberry UI. This is relevant when a previous proxy encoding failed, and the user needs to manually retry the operation.
Can track down assets
Users with this capability can "track down" assets in the Strawberry UI to see which projects they are used in.
Can modify custom asset metadata
Users with this capability can modify the custom metadata of assets in projects to which they have write access.
Can set and modify asset expiration dates
Users with this capability can set and modify the expiration date of assets in projects to which they have write access.
Can retrieve individual assets from own projects
Users with this capability can retrieve assets from the archive if these assets are inside projects created by those users.
Can retrieve individual assets from other people’s projects
Users with this capability can retrieve assets from the archive, regardless of who created the projects that contain those assets.
Can modify the metadata of read-only assets
Users with this role capability can modify asset metadata, even if they have read-only access to the parent project.
AI Transcriptions
Generate AI Transcriptions
Users with this capability can see the "AI Transcribe" button in the Strawberry UI and generate transcripts for assets, folders, and projects.
Download transcripts
Users with this capability can download SRT transcripts via the Strawberry UI, including the Adobe panel.
Modify transcripts
Users with this capability can edit and delete individual transcript segments, but not the entire transcript.
Delete transcripts
Users with this capability can delete entire transcripts via the Strawberry UI.
Comments & Descriptions
Can comment on projects
Users with this capability can comment on projects they have write access to.
Can add asset descriptions
Users with this capability can write descriptions for assets.
Can comment on assets
Users with this capability can comment on assets
Can download comments
Users with this capability can download comments as PDF, XLS, or XML files via the Strawberry UI.
Can modify & delete comments of other users
Users with this capability can modify and delete comments created by other users.
Can mention other users in description fields and comments
Users with this capability can mention other users by directly addressing them using the @ character in a comment or description field. The other user will receive a notification.
Galleries
Can Create Galleries
Users with this capability can create Galleries.
Can submit assets to joined Galleries
Users with this capability can submit assets to Galleries they are members of.
Can submit assets to all Galleries
Users with this capability can submit assets to all Galleries, regardless of membership status.

