Document Understanding user guide

Role-based access control

User roles​

• DU Administrator: acts as a service-level administrator who has permission to perform any action within Document Understanding.
  Note:

  DU Administrators can only assign roles if they also hold the position of Organization Administrator. This can occur in two scenarios:

  • If the DU Administrator role was inherited as part of the Administrator group at Organization level, it works as expected. Any user part of the Administrator group in Automation Cloud^TM is automatically an Organization Administrator.
  • If the DU Administrator role was explicitly assigned (for example, to a user that is part of the Everyone group in Automation Cloud^TM), the user can perform all tasks in Document Understanding as defined by the DU Administrator role, except Role Assignments.
• DU Data Annotator: has permission to view projects and annotate documents, or edit fields, but can't delete data from document types or publish project versions.
• DU Automation User: can discover models and use them to digitize, classify, extract and validate data.
• DU Developer: acts as a project-level administrator who has permission to perform any action within a project.
• DU Model Trainer: has permission to modify certain document type settings and delete or upload documents.
• DU Viewer: has permissions to view certain features, but can't modify any settings within a project.
  Note:

  Recommendations in Document Understanding are displayed only when the user has sufficient permissions to perform the action suggested by the recommendation. If you do not have permissions to execute the recommended actions, you will see a message indicating insufficient access. Users with the Document Understanding Developer, Document Understanding Administrator, and Document Understanding Project Administrator roles can view all available recommendations. The Project Administrator role applies these permissions at the project level only.

Custom roles​

Inheritance of organization roles​

Managing and assigning roles​

User roles and permissions​

• Document Understanding Administrator: has all permissions at both project and tenant level.
• Document Understanding Automation User: can discover models and use them to digitize, classify, extract and validate data.
• Document Understanding Data Annotator: can view projects, label documents, edit fields, but can't delete data from Document Types or publish project versions.
• Document Understanding Developer: can read projects and can manage anything inside a project: classifiers, extractors, document types. Cannot create or delete projects.
• Document Understanding Model Trainer: can view projects, label documents, edit fields, import or export data and delete data from a Document Type session.
• Document Understanding Viewer: can view all entities but has no rights to edit or delete them.
• Document Understanding Project Administrator: has all permissions to manage a project and users for the project.
  Note:

  This role is only available at project level.

Document Understanding Administrator permissions​

Document Understanding Automation User permissions​

Document Understanding Data Annotator permissions​

Document Understanding Developer permissions​

Document Understanding Model Trainer permissions​

Document Understanding Viewer permissions​

Project Administrator permissions​

Creating a custom role​

Tenant-level roles​

Project-level roles​

Creating a custom role​

1. Navigate to your respective Automation Cloud^TM8 URL and log in with your UiPath® account.
2. From the left-side navigation pane, select Document Understanding.
3. Select the Manage access button.

4. Go to the Roles tab, select Create role, and fill in the following fields:
   • Role name - Give your role a descriptive name.
   • Description - Optionally, provide a description.
   • Category - Choose between:
     • Tenant
       • You can assign this role at tenant-level. It consists of tenant-level permissions.
     • Project - You can assign this role to existing or new projects. It consists of project-level permissions.
5. Select Next to proceed to the permissions page.
6. In the Standard permissions and Additional permissions tabs, select the permissions to assign to the custom role.
7. Select Create.

Viewing a custom role​

1. Navigate to your respective Automation Cloud^TM9 URL and log in with your UiPath® account.
2. From the left-side navigation pane, select Document Understanding.
3. Select the Manage access button.
4. Go to the Roles tab and select the ellipsis for the custom role you want to view.
5. Select View.

Editing a custom role​

1. Navigate to your respective Automation Cloud^TM0 URL and log in with your UiPath® account.
2. From the left-side navigation pane, select Document Understanding.
3. Select the Manage access button.
4. Go to the Roles tab and select the ellipsis for the custom role you want to view.
5. Select Edit to modify the description and permissions of the custom role.
6. After making the changes, select Update.

Duplicating a custom role​

1. Navigate to your respective Automation Cloud^TM1 URL and log in with your UiPath® account.
2. From the left-side navigation pane, select Document Understanding.
3. Select the Manage access button.
4. Go to the Roles tab and select the ellipsis for the custom role you want to view.
5. Select Duplicate & customize, to create a copy of the role and modify its description and permissions.
6. After making the changes, select Create.

Removing a custom role​

1. Navigate to your respective Automation Cloud^TM2 URL and log in with your UiPath® account.
2. From the left-side navigation pane, select Document Understanding.
3. Select the Manage access button.
4. Go to the Roles tab and select the ellipsis for the custom role you want to view.
5. Select Delete.
   Note:

   Deleting a custom role also removes all associated role assignments.