User and group access management

Access management is handled by the Test Manager Administrator that can assign tenant roles to users and groups, as well as create custom project roles, and Project Owners that can assign project roles to users and groups.

In Test Manager, there are two types of roles available:

• Tenant - these roles are relevant at tenant level.
• Project - these roles are relevant at project level.

Conditions

• Users that are signed in cannot be removed until they sign out.

Tenant roles

Tenant roles define the actions that a user or group can perform in the target tenant, regardless of the project roles they have assigned. These roles involve the ability of creating projects, creating custom roles, and assigning roles to users or groups.

The table below shows the available tenant roles and their corresponding descriptions.

Tenant role	Description
Test Manager Administrator	A Test Manager administrator can perform the following actions: Assign tenant roles to users and groups. Unassign tenant roles from users and groups. Create projects. Create custom project roles. Use, create, update or delete prompts from the project's prompt library.
Project Creator	A Project Creator can create testing projects. If you want non-administrator users to create projects without granting them administrator privileges, you can assign them only the Project Creator tenant role.

Project roles

Project roles define the actions that a user or a group can perform inside a testing project, such as create manual test cases, or execute tests.

The table below shows the available project roles and their permissions.

Privileges	Project owner	Test Manager	Test Designer	Test Executor	Manual Tester	Viewer
Update, and delete projects (Read, Edit, Delete)
Create projects
View projects (Read)
Assign users and groups to projects
Access to project settings
Dashboard and reports
Create, update and delete integration connections
View requirements
Create, update, and delete requirements (Create, Read, Edit, Delete)
Assign requirements to test cases
View test cases (Read)
Create, update and delete test cases (Create, Read, Edit, Delete)
Add test step to test case
Link automation from Studio to test case
Create, update and delete documents (attached files)
Create, update and delete custom fields
Create, update and delete label
Assign test cases to test sets
View test sets (Read)
Create, update and delete test tests (Create, Read, Edit, Delete)
Execute manual tests
Execute automated tests
Link test set from Orchestrator
View test results (Read)
Update and delete test results (Create, Read, Edit, Delete)
Create defects
Re-execute test executions
Create custom user roles
Assign and unassign manual test case executions to users.
Setting a default execution folder for a project

Enable access management

Note: Required for legacy projects only. New projects have access management enabled by default.

To manage users and groups, you need to enable access management in your Test Manager project. Open Test Manager and navigate to Project Settings > Manage access, open a project, click Enable now, and then confirm your action. Now you can start assigning users and groups to your organization's projects.

Manage user and group access

Note: If you have a legacy project, you might need to enable access management, to start assigning users and groups to your project.

Assign Users and Groups

To assign users and groups, you can perform the following actions:

• Assign tenant-specific roles to users and groups.
• Assign users and groups to testing projects.
• Assign project-specific roles to users and groups.

Assigning tenant roles to users and groups

To manage the actions that a user or group can perform at a tenant level in terms of testing projects, you can assign tenant-specific roles to a user or group.

1. Open Test Manager.
2. Select Settings in the header.
3. Go to the Role Assignments tab.
4. Select Assign users/groups.
5. Enter a user or group in the form field. For example, you can assign roles to the Everyone group.
6. Select the tenant user roles that you want to assign. You can choose from:
   • Project Creator
   • Administrator
7. Select Add to confirm your action.

   The tenant roles are now assigned to the users and groups.

   

Assigning users and groups to projects

To grant users and groups read-only access to a project, you can assign them to a project, without assigning other project-specific roles to users and groups.

1. Open Test Manager.
2. Open a project.
3. Navigate to Project Settings > Manage Access.
4. Select Assign users/groups.
5. Enter a user or group in the form field. For example, you can assign access to the Everyone group.
6. Press Enter to add the user/group. You can add multiple users and groups at once.
7. Click Add to confirm your action. The users and groups are assigned to the project.
   

Assigning project roles to users and groups

To manage the actions that a user or group can perform inside a testing project, you can assign project-specific roles to users and groups. Visit User and group access management to see the permissions for each project role.

1. Open Test Manager.
2. Open a project.
3. Navigate to Project Settings > Manage Access.
4. Select Assign users/groups.
5. Enter a user or group in the form field. For example, you can assign access to the Everyone group.
6. Select the user roles that you want to assign.

   The roles that you can choose from are the pre-defined roles, and the custom roles that you may have created.

7. Select Add to confirm your action.

   The selected roles are assigned to the specified users and groups.

   Note: Any user or group can be assigned or unassigned the Project Owner role. Ensure that each project has at least one user or group with the Project Owner role.
   Figure 1. Pre-defined and custom roles that you can assign to users and groups at project level
   

   

   
   

Edit Individual User and Groups

You can edit roles or remove users and groups.

1. Open Test Manager.
2. Open a project.
3. Navigate to Project Settings > Manage Access.
4. Find the user or group that you want to edit and click the vertical ellipsis.

   4.1 Select Edit roles to change the roles.

   4.2 Select Remove user or Remove group to remove users or groups.

5. Confirm your action.

To perform a bulk operation, see Removing users and groups.

Related articles

Who can create projects

Custom roles

Creating custom roles

Create custom roles to reflect your authorization needs. Roles created and assigned in Test Manager are separated from the ones configured in Orchestrator.

1. Select Settings in the Test Manager header.
2. In the Manage roles tab, select Create role.
3. Give a name and a description for the custom role.
4. Select the desired permissions for each test object:
   All Test Manager users have Read permissions for all test objects selected by default, and you can't deselect it.
   
   

   

   
   
5. Select the tasks this role is allowed to perform:

   Task Permissions	Description
   Manual execution	Allow user to perform manual execution for test cases and test sets.
   Automated execution	Allow user to perform automated execution for test cases and test sets.
   Create and unlink defects	Allow user to create and unlink defects.

   Figure 2. The Task Permissions section of the Create role dialog box
   

   

   
   
6. Select Create.
   The Role created successfully message appears.

Editing custom roles

Edit custom user roles to reflect your authorization needs:

1. Select Settings in the Test Manager header.
2. In the Manage roles tab, select for the user role that you want to edit, and then select one of the following actions:
   • Edit role - This opens the Edit role panel and you can edit the name, description and permissions.
   • Clone - This opens the Clone role panel and you can edit the clone of the role that you're creating.
3. Select Save to record your changes.

Deleting custom roles

1. Select Settings in the Test Manager header.
2. In the Manage roles tab, select one or more custom user roles, and then select Delete.
3. In the Confirm dialog, select Delete.
   

   When you delete a custom user role, it won't be assigned to any user anymore.