Objects in Teamwork Cloud (TWCloud) are protected and only authorized users can access them. A MagicDraw project, for example, is a protected object; therefore, only an authorized user can read and manipulate its content. A document is also a protected object. Both project and document are called resources in TWCloud.

The following is an example of how an authorized user uses the permission to handle protected objects.

  • {Read:Project_A}: This user can read the objects in Project_A.
  • {Edit:Project_B}: This user can edit the objects in Project_B.
  • {CreateUser}: This user can create users in the system.

There are types of permission that are not associated with resource objects such as CreateUser, ConfigureServer, etc. When assigning these permission types to the users, you do not need to specify which object they can work on. You just need to select the global scope and the TWCloud system will give them access accordingly.

When assigning a protected object to a user, you need to define the role scope. If you select the global scope, you authorize the user to work on any resource in the TWCloud system. For more information on the global and custom scope, see Scopes of roles.