# Roles

In Cytomine, all users have defined permissions that allow them to do specific actions.
The permissions in Cytomine are associated to roles that can be related to the platform, or related to each project the user is member of.

# Platform-wide roles

There is 4 roles that can be given to users to define their permissions at a platform level :

# Roles for active users

  • USER : The USER role is the standard role for fully active users : a USER user can create a project, upload its images into its storage, add its images into the project it is member of.
  • GUEST : The GUEST role is the minimum role active users : a GUEST can be active in the projects it is member of, but can not create any project, nor upload any images to the platform (it does not have a Storage).

# Roles for administrator users

  • ADMIN : An ADMIN user can access to the administrator panel, can create users accounts, can use account of anyone in the same instance, can lock other users, access to any project, etc. Only trusted user should have the ADMIN role. An ADMIN user must activate its administrator privileges before using them.
  • SUPERADMIN : A SUPERADMIN is an ADMIN which administrator privileges are activated by default. This role is mainly used by system accounts.

To learn how to create users accounts and how to set their platform-wide role, go to the administration section dedicated to users.

# Summary

Guest User Admin SuperAdmin
Can be active in projects Yes Yes Yes Yes
Can create new projects No Yes Yes Yes
Can upload images No Yes Yes Yes
Can administrate the platform No No Yes Yes
Can access to any user account data No No Yes Yes
Have the administrator privileges activated by default No No No Yes

# Project-wide roles

Users in a project are divided into two categories:

  • A project CONTRIBUTOR is a user which has access to the project, but cannot add images in this project, nor manage the configuration of the project. Allowed actions like doing annnotations on the images, are determined by the editing mode of the project.
  • A project MANAGER is a project contributor with extended rights. It can add images and manages the project, i.e. has rights to change the project configuration, to add new users to a project (as contributor or manager) or to delete the project itself. The user who creates a project is a project manager by default.

To learn how to add users to a project, and define their project-wide role, go to the project section.

Contributor Manager
Can explore images Yes Yes
Can add images to the project Depend on editing mode of the project and only for USER or ADMIN platform-wide roles Yes
Can annotate images Depend on editing mode of the project Yes
Can add information to annotations Depend on editing mode of the project Yes
Can manage the project No Yes

# Combinations of roles

Each user in Cytomine have a platform-wide role, and have a project-wide role in each project it is member of.

Any platform-wide role can be associated to any project-wide role.

Roles Guest User Admin

The user will then benefit from the combination of the permissions of each role.

Example : a platform-wide GUEST can be MANAGER in a project : it will be able to manage the projet using the configuration options, but will not be able to add images to the project as a GUEST do not have any image storage where to upload images.

# Exemples of roles settings

Here is some examples of what combination of roles can attributed to each user type regarding some commun uses of Cytomine. These are just examples, commonly used, and can differ from your neads.

# Teaching

Roles Guest User Admin
Contributor Student Teaching assistant -
Manager - Teaching assistant or Professor Professor or University IT department

# Research

Roles Guest User Admin
Contributor Researchers Laboratory technicians -
Manager - Lead researcher or Director of research Director of research or Laboratory IT department

# Diagnostic

Roles Guest User Admin
Contributor Collaborators or invited experts Laboratory technicians -
Manager - Lead pathologist or Director of pathology Director of pathology or Hospital IT department