# Roles and permissions

> :::note
Feature availability depends on the cloud platform that you are using. For more details, check [Action Center feature availability](feature-availability.md).
:::

:::note
Feature availability depends on the cloud platform that you are using. For more details, check [Action Center feature availability](feature-availability.md).
:::

The roles and permissions for Actions are set from Orchestrator.

## Folder-level permissions for actions or tasks

### Folder-level action permissions

The following table lists the folder-level permissions available for actions/tasks.

| **Permissions** | **Behaviour** |
| --- | --- |
| Actions View | Allows the user to view tasks. |
| Actions Create | Allows the user to create tasks. |
| Actions Edit | Allows the user to edit and complete tasks. |
| Actions Delete | Allows the user to delete tasks. |
| Action Assignment Create | Allows the user to assign tasks to any other user |
| Action Assignment Edit | Allows the user to reassign a task from one user to another. |
| Action Assignment Delete | Allows the user to unassign task from any other user |
| Action Assignment View | Non Functional |
| Action Self Assignment Create | Allows the user to assign tasks to themselves |
| Action Self Assignment Edit | Allows the user to forward tasks from themselves to another user |
| Action Self Assignment Delete | Allows the user to unassign tasks from themselves |
| Action Self Assignment View | Non-functional |

## Robot role

In order for the Robot to generate an Action, upload, download, and delete data from a storage bucket, it needs the appropriate permissions. Make sure the [Robot role](https://docs.uipath.com/orchestrator/automation-cloud/latest/user-guide/default-roles#robot-role) has been granted the following:

To create an action:

* **View**,**Edit**,**Create** on Actions

To assign an action:

* **Create** on Actions Assignments

  ![](https://dev-assets.cms.uipath.com/assets/images/action-center/action-center-image-Arrow_Upload-ad3e8294-2f8c5e96.png) To upload document data:

* **View**,**Edit**,**Create** on Storage Files
* **View** on Storage Buckets

  ![](https://dev-assets.cms.uipath.com/assets/images/action-center/action-center-image-Bin-d6f460dc-7788c684.png) To delete document data after downloading:

* **View**,**Edit**,**Delete** on Storage Files
* **View** on Storage Buckets

## Personal workspace administrator role

To generate actions in the context of a personal workspace folder and have them displayed in the Action Center inbox, the following permissions have been added as [default](https://docs.uipath.com/orchestrator/v2022.10/docs/default-roles#personal-workspace-administrator-role):

* **Create**,**View**,**Edit**,**Delete** on Actions.
* **Create**,**View**,**Edit**,**Delete** on Action Catalogs.
* **Create**, **Edit**, **Delete** on Action Self Assignment.

## Custom roles - actions

:::note
Any one of the **Create, Edit or Delete** permission on **Action Assignments** enables the **Manage Actions** view on the actions panel, which facilitates the management of all actions in the corresponding Orchestrator folder. To view and manage only the actions assigned to yourself, switch to the **My Actions** view.
:::

We recommend defining the following roles for handling actions:

### Document validation admin

As a validation admin, you see all the generated Document Validation Actions and assign them to users in the **Manage Actions** view.

The following permissions are required:

* **View**,**Edit** on Actions.
* **View**,**Edit**,**Create**,**Delete** on Storage Files.
* **View** on Storage Buckets.
* **Edit**,**Create**, **Delete** on Action Assignments.
* **Edit**, **Create**, **Delete** on Action Self Assignment.
* **View**,**Edit**,**Create** on Action Catalogs.

  

### Document validation user

As a validation user, you see all the form and Document Validation Actions assigned to you, and validate them in the **My Actions** view.

The following permissions are required:

* **View**,**Edit** on Actions.
* **Edit**, **Create**, **Delete** on Action Self Assignment.
* **View**,**Edit**,**Create** on Storage Files.
* **View** on Storage Buckets.

  

### Document classification admin

As a classification admin, you see all the generated Document Classification Actions and assign them to users in the **Manage Actions** view.

The following permissions are required:

* **View**,**Edit** on Actions.
* **View**,**Edit**,**Create**,**Delete** on Storage Files.
* **View** on Storage Buckets.
* **Edit**,**Create**, **Delete** on Action Assignments.
* **Edit**, **Create**, **Delete** on Action Self Assignment.
* **View**,**Edit**,**Create** on Action Catalogs.

  

### Document classification user

As a classification user, you see all the form and Document Classification Actions assigned to you, and edit them in the **My Actions** view.

The following permissions are required:

* **View**,**Edit** on Actions.
* **Edit**, **Create**, **Delete** on Action Self Assignment.
* **View**,**Edit**,**Create** on Storage Files.
* **View** on Storage Buckets.

  

### Action admin user

As an action admin, you see all the generated Form Actions and assign them to users in the **Manage Actions** view.

The following permissions are required:

* **Edit**, **Create**, **Delete** on Action Assignment.
* **Edit**, **Create**, **Delete** on Action Self Assignment.
* **View**,**Edit**,**Create** on Action Catalogs.
* **View**,**Edit**,**Create**,**Delete** on Actions.

To manage action labels, the following permissions are required:

* **View**,**Create**,**Delete** on Tags.

  

### Action user

As an action user, you see all the Form Actions assigned to you, and edit them in the **My Actions** view.

The following permissions are required:

* **View**,**Edit**,**Create** on Actions.
* **Edit**, **Create**, **Delete** on Action Self Assignment.

To manage action labels, the following permissions are required:

* **View**,**Create**,**Delete** on Tags.

  

### Technical user

As a technical user, you handle External Actions.

The following permissions are required:

* **Edit** on Actions.

To manage action labels, the following permissions are required:

* **View**,**Create**,**Delete** on Tags.

## Custom roles - processes

We recommend defining the following roles for handling processes:

### Queue process user

As a queue process user, you can [generate forms to provide inputs to a queue](https://docs.uipath.com/action-center/automation-cloud/latest/user-guide/managing-processes#generating-forms-to-provide-inputs-to-a-queue).

The following permissions are required:

* **View** on Queues.
* **View**,**Edit**,**Delete** on Transactions.

  

### Job process user

As a job process user, you can [generate forms to provide inputs to a job](https://docs.uipath.com/action-center/automation-cloud/latest/user-guide/managing-processes#generating-forms-to-provide-inputs-to-a-job).

The following permissions are required:

* **View** on Processes.
* **View**,**Edit**,**Delete** on Jobs.
  :::note
  To trigger a process through file upload, you need the following permissions:
  * **View**,**Edit**, **Create** on Storage Files.
  :::
