How do permissions work in the Document Management tool?

regional availability
The Document Management tool is available in select countries. It is not yet available for Procore accounts in the United States. For more information, please reach out to your Procore point of contact.

Background

Instead of needing to manually set permissions for a folder or document, the Document Management tool uses a combination of different permissions and settings to streamline access to documents and determine who can take certain actions in the tool. Users can have either 'Standard' or 'Admin' permissions for the Document Management tool itself, but will need to be added to permission groups in order to view specific types of documents and upload or submit files. 

 Important
Company level Administrators will not automatically have access to items in the Document Management tool. Admins need to belong to the correct permission group to access, upload, and submit files in the Document Management tool. 

Answer

The Document Management tool uses two permission levels: General Procore tool permissions to grant access to the tool itself and flexible permission groups to grant access to individual document revisions based on their attributes.

Permission groups can be created for different user roles or companies on the project, and you can set specific rules to automatically control which document revisions these groups have access to and at what level they should have access (e.g. Viewer, Owner, or Admin). Permissions can be further customized on the Permissions tab of the Configure Settings page and within permission templates for the Workflows tool.

pdm-permissions-tab.png

Video

 

Video content may not accurately reflect the current state of the system, and/or it may be out of date.

Details

 Note
  • Action based permissions ('Upload New Files' and 'Submit New Files') are assigned within a permission group. 
  • A permission type ('Admin', 'Owner', Viewer') is selected for each permission group to determine the type of access that will be granted to the group. The actions available to these types are specified in the 'Document Permissions' section. See View and Manage Document Permissions.
  • Document attributes are selected when a permission group should only have access to specific documents. 

The different types of permissions used are explained below:

General Tool Permissions

Since access to documents are mostly managed with permission groups that are assigned access automatically based on specific document attributes, 'Read Only' permissions do not exist for the tool. 'None' permissions can be assigned to users who don't need access to any documents within the Document Management tool. 

In general, only users who need to manage document and permission settings, view all uploaded files on the 'Uploads' tab, and create Project Saved Views should be assigned 'Admin' permission to the Document Management tool. Additional permissions, such as the ability to upload and submit files, are granted through permission groups (see the Permission Groups section below). For a list of actions that users can take with the appropriate permissions, see the Document Management Permissions Matrix
2024-08-09_general workflows tool permissions.png

Permission Groups

Permission groups, which are created and managed by 'Admin' level users in the tool's Configure Settings page, are used to control additional permissions for project team members. See Create a Permission Group for the Document Management Tool

After you add people or groups to a permission group, you'll be able to customize the permissions as explained below:

Upload and Submit Permissions

Permission groups have two action based permissions to control who can upload and submit documents to the project:

  • Upload New Files
  • Submit New Files

upload-submit-permissions.png

If you want to allow certain users to upload files and complete information, but have someone else submit files, you can enable the 'Upload New Files' permission and disable 'Submit New Files'. 

 Important
  • In order to upload files to the tool, a user must be added to a Document Management permission group that has the 'Upload New Files' permission enabled (shown in the image below). 'Admin' level permission to the Document Management tool alone does NOT grant the ability to upload files.
  • Permission groups do not apply to files on the 'Uploads' tab. Users with 'Admin' permissions to the Document Management tool can view all files that have been uploaded to the Uploads tab, while users with 'Standard' level permissions can only view files that they uploaded.

Permission Types and Document Access

When creating or editing a permission group, you can click Grant Permissions to customize document permissions for the group.

You'll need to select one of three permission types ('Admin', 'Owner', or 'Viewer') for the group, and then choose whether these permissions should apply to all documents in the tool, or only documents with certain attributes (such as Type or Status).grant-permission-panel.png

Note: 

  • The actions available to the three document permission types are listed and managed in the 'Document Permissions' section of the Permissions tab. See View and Manage Document Permissions in the Document Management Tool.
  • If a user is added to more than one permission group, the highest level permissions are respected. For example, if a user exists in a permission group that has the ability to 'Upload New Files', but is added to a different group without permission to upload, they can still upload files to the tool.
  • Permissions can be controlled further in the 'Document Permissions' and 'Workflow Permissions' sections of the Permissions tab, as explained below. 

For more information on creating and assigning permission groups, see Create a Permission Group for the Document Management Tool and additional permission group tutorials on the Tutorials page. 

Document Permissions

The 'Document Permissions' section of the Document Management tool's Configure Settings page is where you can customize the actions people and groups can perform on documents that they have access to (that are not in a workflow). See View and Manage Document Permissions in the Document Management Tool.

The documents that these permission levels can view or manage are specified when creating or editing a permission group.

dm-document-permissions.png

Workflow Permissions

 Important
Workflow Permissions are only relevant if your organization is using the Workflows tool in Procore. 

In addition to being added to a permission group, actions related to workflows within the Document Management tool can require permissions the following areas in Procore:

Workflow Granular Permissions (Project Permission Template)
2024-08-09_workflows granular permissions 70percent.png

The table below lists the granular permissions that are available to grant to users in a project permissions template.

Granular Permission Name Granular Permission Description
View Workflow Templates Grants users the privilege to view the template of a document with a custom workflow.
View Complete Workflow History as Workflow Participant Grants users the privilege of viewing a custom workflow's entire history when they are a participant in the document workflow.
View Previous Step History Only Grants users the privilege of viewing a document workflow's previous step when they are a participant in the workflow.
Can Be Workflow Manager Grants users the privilege of acting as a workflow manager for documents on the project.
Can Start Workflows Grants users the privilege of starting custom workflows for documents in the project.
Configure Workflow Templates Grants users the privilege of configuring custom workflow templates for documents in the project.

Workflow Permissions (Document management Tool Configure Settings Page)

 Important
The 'Workflows' tab of the Configure Settings page is only visible if your organization is using the Workflows tool in Procore. 

dm-workflow-permissions.png

See Also