CEO comes with basic access control groups that should fit most organizations, but they can be tweaked, combined and extended as necessary.
Administrators can do everything within the system and this is the one group that you can't change or remove. There are actions that only members of the Administrator group can perform, like clearing locks, creating and updating groups, and updating some publication settings. With the exception of updating groups, these actions cannot be delegated to other user groups.
It's good practice to have only a few Administrators in your organization.
A Super Editor is like an Administrator, but with slightly less power. While administrators have access to just about all settings and content, they cannot clear locks or update group settings.
Editors are be able to provide for most daily functions of a news organization. Notable differences from a Super Editor user would be:
- Cannot manage users.
- Cannot delete content, assignments or containers.
- Cannot manage Workflows or WorkflowSections.
- Cannot delete issues.
Writers have a limited set of functionality, relating directly to the process of creating, editing content and managing workflows. Notable differences from Editors:
- Cannot override versions
- Cannot create or update assignments (but can comment).
Pages Only group can only modify page type content. This is useful for front office users that need to manage advertising and contact information.
Only Editors, Super Editors and Administrators come with the ability to publish content.