Permissions in Document Management have two layers: a role-based base visibility determines which document areas a person can access at all. Within these areas, read and write permissions per folder are assigned granularly.

Which document areas a person can see depends on their ZEP role:

Administrators have access to all document areas: general documents, employee documents, project documents, and customer documents. They can create folders, upload documents, and assign permissions.

Controllers have access to Employee documents and General documents by default. Project and customer documents are not included.

Users with the Additional authorizations permission see Customer documents, Project documents (if assigned as project team member or project manager), and General documents.

Users without additional authorizations see Project documents only for projects in which they are entered as project team member or project manager, as well as General documents. Employee and customer documents are not visible.

Every person sees their own employee documents under Documents > Employee documents – even without further permission. Standard users only see their own folder there; administrators, controllers, and department managers see the folders of all authorized persons.

Within each area, read and write rights are assigned separately per folder. Open a folder and select Edit permissions from the action menu. You see two separate selection fields:

For each selection field, the following options are available:

If a sub-folder is configured with the option Inherited, it automatically adopts the permissions of the parent folder. If the parent folder permissions change later, they apply to the inherited sub-folders without further adjustment.

Permissions can be changed by persons who themselves have write permission on the relevant folder. Administrators generally have write permission on all document areas.