This page lists every permission category available when creating or editing a Role or User in PV4, and exactly what each permission inside it controls — see Roles for how permissions combine into a role.
Every permission grants access at one of three levels: Read (view only), Edit (modify existing items), or Full (create, edit, and delete). Where a permission is marked Own & Others below, those levels can be set separately for items the assigned user created themselves ("Own") versus items anyone else created ("Others"). Where it's marked Others only, the same levels apply regardless of who created the item. Some permissions also have a scoped counterpart limited to specific content folders or specific events, selected from a picker when assigning the permission — these are listed as their own row.
API Keys
A service for managing event API keys.
|
Permission |
What it grants |
|---|---|
|
Manage API Keys (Others only) |
Allows a user to see and manage API keys, including changing their name, description and expiration date. |
Applications
A service for managing applications information.
|
Permission |
What it grants |
|---|---|
|
Manage applications (Others only) |
Allows a user to see active applications and manage all applications, including changing their name and description. |
|
Manage Inactive Applications (Others only) |
Allows a user to see and manage inactive applications. |
Content
A service for managing access to content.
|
Permission |
What it grants |
|---|---|
|
Manage Hidden Assets (Own & Others) |
Manage hidden content assets. |
|
Manage folder hidden assets (specific folders) |
Allows users to manage hidden content assets in a specific folder and any folders within it. |
|
Manage Assets (Own & Others) |
Manage content assets. |
|
Manage folder content assets (specific folders) |
Allows users to manage content assets in a specific folder and any folders within it. |
|
Manage Files (Own & Others) |
Allows a user to manage files, including uploading files, in any folder. |
|
Manage folder files (specific folders) |
Allows a user to upload files and delete files. |
|
View Hidden Files (Others only) |
Allows a user to see hidden files, and when they will be deleted from the database and S3. |
|
View folder hidden files (specific folders) |
Allows a user to see hidden files and when they will be deleted in specific folders. |
|
Manage Content Folders (Own & Others) |
Manage all content folders. |
|
Manage individual content folders (specific folders) |
Allows users to manage the information about an individual folder. |
|
Manage Hidden Content Folders (Own & Others) |
Manage all hidden content folders. |
|
Manage individual hidden content folders (specific folders) |
Allows users to manage the information about an individual hidden folder. |
Cue Types
A service for managing cue types information.
|
Permission |
What it grants |
|---|---|
|
Manage cue types (Others only) |
Manage cue types, including changing their name, code and description. |
|
Manage cue type domains (Others only) |
Manage cue type domains for all events, including being able to set clearing rules, layers and hot keys. |
|
Manage event cue type domains (specific events) |
Manage cue type domains for only the specified events. |
Cues
A service for managing cues.
|
Permission |
What it grants |
|---|---|
|
Manage Cues (Own & Others) |
Manage cues for all events, multis and sequences, including changing name, type, label, mode and cue-level attributes. Duplicating cues requires Edit-level permission. |
|
Manage event cues (specific events) |
Manage cues for only the specified events. |
|
Manage Hidden Cues (Own & Others) |
Manage hidden cues for all events, multis and sequences, including changing name, type, label, mode and cue-level attributes. Duplicating cues requires Edit-level permission. |
|
Manage event cues (specific events, hidden cues) |
Manage hidden cues for only the specified events. |
Note: the PV4 Portal UI labels both of the event-scoped rows above "Manage event cues" — the second one (under Manage Hidden Cues) applies to hidden cues specifically, even though its on-screen label doesn't say so. Distinguished here for clarity.
Events
A service for managing events information.
|
Permission |
What it grants |
|---|---|
|
Manage events (Others only) |
Manage all events, including changing their code, name, and whether they are active or not. |
|
Manage Individual Events (specific events) |
Manage only specified events. Full "Manage events" permission is needed to delete an event. If a user only has "Manage Individual Events", they can only see those events. |
|
Duplicate Events (Others only) |
Allows a user to duplicate events, including all of their data, such as cues, multis, sequences, surfaces and more. Full permission is required to do this. |
Feature Flags (Show Roles)
A service for managing show roles.
Known issue: in the current UI this category and the one below are both labeled "Feature Flags"
|
Permission |
What it grants |
|---|---|
|
Manage Show Roles (Others only) |
Manage show roles, including changing their details, adding and removing roles and permissions. |
Feature Flags
A service for managing feature flags.
|
Permission |
What it grants |
|---|---|
|
Manage Feature Flags (Own & Others) |
Manage feature flags, including changing their details, adding and removing roles and permissions. A user must be a super admin in order to make another user a super admin. |
Legacy Content
A service for managing legacy content access.
|
Permission |
What it grants |
|---|---|
|
Manage legacy content slots (Others only) |
Manage access to legacy content slots. |
|
Manage legacy content collections (Others only) |
Manage access to legacy content collections. |
Legacy Stats Providers
A service for managing access to legacy stats providers.
|
Permission |
What it grants |
|---|---|
|
Manage Scripts (Own & Others) |
Manage Global Legacy Stats Providers. |
|
Manage Legacy Stats Providers Instances (Others only) |
Allows a user to read, edit and delete legacy stats provider instances. |
|
Manage event Legacy Stats Providers Instances (specific events) |
Allows a user to read, edit and delete legacy stats provider instances on a specific event. |
This category's first permission is labeled "Manage Scripts" in the UI, the same label used in the separate Scripts category below — they are distinct permissions in distinct categories. Noted here in case it's confusing during a role review; not filed as a bug since it wasn't confirmed as unintentional.
Notifications
A service for managing access to notifications.
|
Permission |
What it grants |
|---|---|
|
Manage Notifications (Own & Others) |
Manage read access to notifications. |
Object Blueprints
A service for managing access to object blueprints.
|
Permission |
What it grants |
|---|---|
|
Manage Object Blueprints (Others only) |
Manage read access to object blueprints. |
Roles
A service for managing roles and permissions.
|
Permission |
What it grants |
|---|---|
|
Manage roles (Others only) |
Manage roles, including changing their access levels for own and other actions. |
Scripts
A service for managing access to scripts.
|
Permission |
What it grants |
|---|---|
|
Manage Scripts (Own & Others) |
Manage scripts. |
|
Manage Script Secrets (Others only) |
Allows a user to read and edit script secrets on an event. |
|
Manage event script secrets (specific events) |
Allows a user to read and edit script secrets on a specific event. |
Subscriptions
A service for managing users' ability to watch generic subscriptions.
|
Permission |
What it grants |
|---|---|
|
Invalidate Domain Subscription (Others only) |
Allows a user to invalidate the domain subscription used for tracking when certain domains are updated and need to be cleared. |
|
Update files subscription (Others only) |
Allows a user to be notified when a file is updated or deleted. |
Surfaces
A service for managing surfaces information.
|
Permission |
What it grants |
|---|---|
|
Manage surfaces (Others only) |
Manage surfaces, including changing their name and dimensions. |
|
Manage surface instances (Others only) |
Manage surface instances for all events, including changing their friendly names and whether they are active or not. |
|
Manage event surface instances (specific events) |
Manage surface instances for only the specified events. |
Templates
A service for managing templates.
|
Permission |
What it grants |
|---|---|
|
Manage Templates (Others only) |
Manage cue templates for all events, including changing name, type and other attributes within the template editor. |
|
Manage event templates (specific events) |
Manage templates for only the specified events. |
|
Manage Hidden Templates (Others only) |
Manage hidden cue templates for all events, including changing name, type and other attributes within the template editor. |
|
Manage hidden event templates (specific events) |
Manage hidden templates for only the specified events. |
Transcode Jobs
A service for managing transcode jobs and their presets.
|
Permission |
What it grants |
|---|---|
|
Manage Transcode Jobs (Own & Others) |
Manage transcode jobs, including changing their details. |
|
Manage Transcode Jobs Presets (Others only) |
Manage transcode jobs presets, including changing their details. |
|
Manage Automated Transcode Conditions (Others only) |
Manage automated transcode conditions, including changing their details. |
|
Manage Automated Transcode Rules (Own & Others) |
Manage automated transcode rules, including changing their details. |
Users and Authorization
A service for managing users, their roles and permissions.
|
Permission |
What it grants |
|---|---|
|
Manage Users (Own & Others) |
Manage users, including changing their details, adding and removing roles and permissions. A user must be a super admin in order to make another user a super admin. |