# Roles and permissions

## Account

From the perspective of managing their own account, **all** users are treated as regular users — `Site Admins` and `Template Users` do **not** get any additional permissions. There are, however, restrictions on what actions regular users can do based on how they authenticate. 

### Settings

|                                           | Internal Accounts | SSO (SAML/LDAP) |
| ----------------------------------------- | :---------------: | :-------------: |
| Update account info                       |        Yes        |        No       |
| Change password                           |        Yes        |        No       |
| Generate Git bridge authentication tokens |        Yes        |       Yes       |
| Delete Git bridge authentication tokens   |        Yes        |       Yes       |
| Manage sessions                           |        Yes        |       Yes       |

{% hint style="info" %}
The Git Bridge integration is **only** available in Server Pro. Check out the [Server Pro vs. Community Edition](https://docs.overleaf.com/on-premises/welcome/server-pro-vs.-community-edition) for more information.
{% endhint %}

### Your Sessions

|                      | User |
| -------------------- | :--: |
| Clear sessions       |  Yes |
| View current session |  Yes |
| View other sessions  |  Yes |

## Project Dashboard

From the perspective of the project dashboard, **all** users are treated as regular users — Site Admins and Template users do not get any additional permissions. 

### Project management and collaboration

<table><thead><tr><th></th><th width="100" align="center">User</th></tr></thead><tbody><tr><td>Create new project</td><td align="center">Yes</td></tr><tr><td>Open a project</td><td align="center">Yes</td></tr><tr><td>Rename a project</td><td align="center">Yes</td></tr><tr><td>View template gallery</td><td align="center">Yes</td></tr><tr><td>Copy a project</td><td align="center">Yes</td></tr><tr><td>Trash single project</td><td align="center">Yes</td></tr><tr><td>Restore a project</td><td align="center">Yes</td></tr><tr><td>Trash multiple projects</td><td align="center">Yes</td></tr><tr><td>Restore multiple projects</td><td align="center">Yes</td></tr><tr><td>Download a Zip of project</td><td align="center">Yes</td></tr><tr><td>Download a Zip containing multiple projects</td><td align="center">Yes</td></tr><tr><td>Join project (via banner)</td><td align="center">Yes</td></tr><tr><td>Leave a project</td><td align="center">Yes</td></tr><tr><td>Leave multiple projects</td><td align="center">Yes</td></tr></tbody></table>

### Organizing and finding projects

<table><thead><tr><th></th><th width="100" align="center">User</th></tr></thead><tbody><tr><td>List owned and invited projects</td><td align="center">Yes</td></tr><tr><td>Search for projects</td><td align="center">Yes</td></tr><tr><td>Filter projects based on group (All, Your, Shared with you, Archived and Trashed Projects )</td><td align="center">Yes</td></tr><tr><td>Create new tag</td><td align="center">Yes</td></tr><tr><td>Tag a project</td><td align="center">Yes</td></tr><tr><td>Tag multiple projects</td><td align="center">Yes</td></tr><tr><td>Filter projects based on tag</td><td align="center">Yes</td></tr><tr><td>Archive a project</td><td align="center">Yes</td></tr><tr><td>Archive multiple projects</td><td align="center">Yes</td></tr></tbody></table>

### Account actions and navigation

<table><thead><tr><th></th><th width="100" align="center">User</th></tr></thead><tbody><tr><td>Log out</td><td align="center">Yes</td></tr><tr><td>Open account settings</td><td align="center">Yes</td></tr></tbody></table>

## Editor IDE

From the perspective of the Overleaf Editor IDE, you can be one of the following roles: `Project Owner` , `Editor`  , `Reviewer` , `Viewer` , `Site Administrator` or `Template User`.

{% hint style="info" %}
In Server Pro and Community Edition, there is support for providing anonymous **read-only** and **read-write** access to projects.&#x20;

For more information on this check out the `OVERLEAF_ALLOW_PUBLIC_ACCESS` and `OVERLEAF_ALLOW_ANONYMOUS_READ_AND_WRITE_SHARING` environment variables [here](https://docs.overleaf.com/on-premises/configuration/overleaf-toolkit/environment-variables).
{% endhint %}

### Text operations

<table><thead><tr><th></th><th width="100" align="center">Owner</th><th width="100" align="center">Editor</th><th width="100" align="center">Reviewer</th><th width="100" align="center">Viewer</th><th width="100" align="center">Viewer</th></tr></thead><tbody><tr><td><br></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center">Named Collaborator</td><td align="center">Link Sharing</td></tr><tr><td>Edit text</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Edits become suggestions</td><td align="center">No</td><td align="center">No</td></tr></tbody></table>

### Sharing

<table><thead><tr><th></th><th width="100" align="center">Owner</th><th width="100" align="center">Editor</th><th width="100" align="center">Reviewer</th><th width="100" align="center">Viewer</th><th width="100" align="center">Viewer</th></tr></thead><tbody><tr><td><br></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center">Named Collaborator</td><td align="center">Link Sharing</td></tr><tr><td>Invite new users or update sharing permissions</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr><tr><td>See named collaborator who the project is shared with</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td></tr></tbody></table>

### Project & file operations

<table><thead><tr><th></th><th width="100" align="center">Owner</th><th width="100" align="center">Editor</th><th width="100" align="center">Reviewer</th><th width="100" align="center">Viewer</th><th width="100" align="center">Viewer</th></tr></thead><tbody><tr><td></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center">Named collaborator</td><td align="center">Link sharing</td></tr><tr><td>Rename the project</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr><tr><td>Create/rename/delete/move files</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr><tr><td>Download project or files</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td>Duplicate the project</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr></tbody></table>

### Collaborating

<table><thead><tr><th></th><th width="100" align="center">Owner</th><th width="100" align="center">Editor</th><th width="100" align="center">Reviewer</th><th width="100" align="center">Viewer</th><th width="100" align="center">Viewer</th></tr></thead><tbody><tr><td></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center">Named collaborator</td><td align="center">Link sharing</td></tr><tr><td>Add &#x26; reply to comments</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td>View comments</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td></tr><tr><td>Resolve or delete collaborator comments</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr><tr><td>Add tracked changes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td>View tracked changes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes (cannot see author)</td></tr><tr><td>Accept or reject collaborator tracked changes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr><tr><td>View and send chat messages. </td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td></tr></tbody></table>

{% hint style="info" %}
Commenting and Real-time tracked changes are **only** available in Server Pro. Check out the [Server Pro vs. Community Edition](https://docs.overleaf.com/on-premises/welcome/server-pro-vs.-community-edition) for more information.
{% endhint %}

{% hint style="info" %}
The in-project chat feature can be disabled by setting `OVERLEAF_DISABLE_CHAT=true`. See the [Environment variables](https://docs.overleaf.com/on-premises/configuration/overleaf-toolkit/environment-variables) section for more information on customizing your deployment.
{% endhint %}

### History

<table><thead><tr><th></th><th width="100" align="center">Owner</th><th width="100" align="center">Editor</th><th width="100" align="center">Reviewer</th><th width="100" align="center">Viewer</th><th width="100" align="center">Viewer</th></tr></thead><tbody><tr><td></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center">Named collaborator</td><td align="center">Link sharing</td></tr><tr><td>View history</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td></tr><tr><td>Restore file or project from history </td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr><tr><td>Add labels</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr></tbody></table>

### Integrations

<table><thead><tr><th></th><th width="100" align="center">Owner</th><th width="100" align="center">Editor</th><th width="100" align="center">Reviewer</th><th width="100" align="center">Viewer</th><th width="100" align="center">Viewer</th></tr></thead><tbody><tr><td></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center">Named collaborator</td><td align="center">Link sharing</td></tr><tr><td>Git: Clone &#x26; pull from Overleaf </td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td>Git: Push to Overleaf </td><td align="center">Yes</td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td><td align="center">No</td></tr></tbody></table>

{% hint style="info" %}
The Git Bridge integration is **only** available in Server Pro. Check out the [Server Pro vs. Community Edition](https://docs.overleaf.com/on-premises/welcome/server-pro-vs.-community-edition) for more information.
{% endhint %}

### Manage template

|                                         | User | Template User | Admin |
| --------------------------------------- | :--: | :-----------: | :---: |
| Publish template to gallery (public)    |  No  |      Yes      |   No  |
| Unpublish template (public)             |  No  |      Yes      |   No  |
| Republish template in gallery (public)  |  No  |      Yes      |   No  |
| Publish template to gallery (private)   |  No  |      Yes      |  Yes  |
| Unpublish template (private)            |  No  |      Yes      |  Yes  |
| Republish template in gallery (private) |  No  |      Yes      |  Yes  |

{% hint style="info" %}
The `Template User` role is **specific** to Server Pro. For more information on managing templates check out the [Templates](https://docs.overleaf.com/on-premises/configuration/overleaf-toolkit/server-pro-only-configuration/templates) section.
{% endhint %}

## Template Gallery

|                               | User | Template User | Admin |
| ----------------------------- | :--: | :-----------: | :---: |
| List templates                |  Yes |      Yes      |  Yes  |
| Open as Template              |  Yes |      Yes      |  Yes  |
| Download template as Zip file |  Yes |      Yes      |  Yes  |
| Unpublish template            |  No  |      Yes      |  Yes  |
| Republish template            |  No  |      Yes      |  Yes  |

{% hint style="info" %}
The `Template User` role is **specific** to Server Pro, it is **not** available in the Community Edition. For more information on managing templates check out the [Templates](https://docs.overleaf.com/on-premises/configuration/overleaf-toolkit/server-pro-only-configuration/templates) section.
{% endhint %}

## Admin Panel

### Manage Site

#### System Messages

|                    | Server Pro | Community Edition |
| ------------------ | :--------: | :---------------: |
| Post Message       |     Yes    |        Yes        |
| Clear all messages |     Yes    |        Yes        |

#### Open/Close Editor

|                      | Server Pro | Community Edition |
| -------------------- | :--------: | :---------------: |
| Close Editor         |     Yes    |        Yes        |
| Disconnect all users |     Yes    |        Yes        |
| Reopen Editor        |     Yes    |        Yes        |

### Manage Users

{% hint style="info" %}
The Admin Portal in the Community Edition **only** supports registering users. Full user managment is **only** availaing in Server Pro. Check out the [Server Pro vs. Community Edition](https://docs.overleaf.com/on-premises/welcome/server-pro-vs.-community-edition) for more information.
{% endhint %}

#### Manage Users -> Users

|                       |       Server Pro       | Community Edition |
| --------------------- | :--------------------: | :---------------: |
| List all users        |           Yes          |         No        |
| Create user           | Yes (if not using SSO) |        Yes        |
| Delete multiple users |           Yes          |         No        |
| Search for users      |           Yes          |         No        |

#### Manage Users -> Users -> User -> User Info

|                                                                 | Server Pro | Community Edition |
| --------------------------------------------------------------- | :--------: | :---------------: |
| View user information                                           |     Yes    |         No        |
| Add email address                                               |     Yes    |         No        |
| Delete email address                                            |     Yes    |         No        |
| Change primary email address                                    |     Yes    |         No        |
| Generate password reset link (if using internal authentication) |     Yes    |         No        |
| Edit user profile information                                   |     Yes    |         No        |
| View editor settings for user                                   |     Yes    |         No        |
| Delete user                                                     |     Yes    |         No        |
| Assign Site Admin role                                          |     Yes    |         No        |

#### Manage Users -> Users -> User -> Projects

|                          | Server Pro | Community Edition |
| ------------------------ | :--------: | :---------------: |
| Search projects          |     Yes    |         No        |
| View all projects        |     Yes    |         No        |
| Delete multiple projects |     Yes    |         No        |
| View collaborators       |     Yes    |         No        |
| Open project             |     Yes    |         No        |
| View project information |     Yes    |         No        |

#### Manage Users -> Users -> User -> Project -> Project Info

|                                                                | Server Pro | Community Edition |
| -------------------------------------------------------------- | :--------: | :---------------: |
| View project information                                       |     Yes    |         No        |
| Open project                                                   |     Yes    |         No        |
| Transfer ownership of project to another user                  |     Yes    |         No        |
| View collaborators and permissions (direct shares)             |     Yes    |         No        |
| View token-access collaborators and permissions (link sharing) |     Yes    |         No        |
| Open a copy of the project                                     |     Yes    |         No        |

#### Manage Users -> Users -> User -> Project -> Deleted Docs

|                            | Server Pro | Community Edition |
| -------------------------- | :--------: | :---------------: |
| List deleted documents     |     Yes    |         No        |
| Undelete deleted documents |     Yes    |         No        |

#### Manage Users -> Users -> User -> Project -> Audit Log

|                        | Server Pro | Community Edition |
| ---------------------- | :--------: | :---------------: |
| View project Audit Log |     Yes    |         No        |

#### Manage Users -> Users -> User -> Deleted Projects

|                                 | Server Pro | Community Edition |
| ------------------------------- | :--------: | :---------------: |
| List deleted projects           |     Yes    |         No        |
| View delete project information |     Yes    |         No        |

#### Manage Users -> Users -> User -> Audit Log

|                                 | Server Pro | Community Edition |
| ------------------------------- | :--------: | :---------------: |
| View user Audit Log information |     Yes    |         No        |

#### Manage Users -> Users -> User -> Sessions

|                                       | Server Pro | Community Edition |
| ------------------------------------- | :--------: | :---------------: |
| View current user session information |     Yes    |         No        |
| Clear all sessions                    |     Yes    |         No        |

#### License Usage

|                        | Server Pro | Community Edition |
| ---------------------- | :--------: | :---------------: |
| View active user count |     Yes    |         No        |

### Project URL Lookup

|                           | Server Pro | Community Edition |
| ------------------------- | :--------: | :---------------: |
| Search for project by URL |     Yes    |         No        |