Understanding User Groups and Roles in Umbraco

User Groups/Roles Overview

Umbraco uses User Groups (also known as Roles) to manage permissions and define what each user can do within the CMS. These groups can be customised, but most Umbraco installations include the following default groups:

Administrators

Administrators have full control over the Umbraco CMS. They can:

• Access and edit all content and settings.

• Create, modify, and disable user accounts.

• Manage permissions and user groups.

• Handle sensitive data.

• Publish/unpublish content across the site.

• Access and edit Members

• Create and edit Forms

• Configure Translation

Administrators are ideal for developers, site managers, or anyone responsible for overseeing the entire system.

Writers

Writers are responsible for creating content but usually have limited publishing rights. They can:

• Create and edit content.

• Save drafts for approval.

• Collaborate with editors to refine content before publishing.

Writers are typically used for content creators or bloggers who don’t need access to the full site.

Editors

Editors manage the content workflow and have permissions to publish content. They can:

• Edit, approve, and publish content created by Writers.

• Edit content, media and forms.

• Make changes to live content.

• Schedule posts and updates.

This role is suited for team members who review and ensure the quality of content before it goes live.

Translators

Translators focus on translating content into different languages. They can:

• Access specific content for translation.

• Update translated text.

• Collaborate with editors to ensure accuracy.

Translators typically don’t have permission to publish, keeping their focus on language-specific content.

Sensitive Data Permissions

Certain roles, such as Administrators, may have access to sensitive data. This includes:

• Viewing personal or confidential user information.

• Managing areas that contain sensitive files or forms.

• Controlling privacy settings or data protection features.

If your Umbraco instance handles sensitive data, ensure only trusted users have access to this information.

Custom User Groups

Umbraco allows you to create custom User Groups tailored to your needs. For example, you can create a "Marketing" group with specific permissions for managing campaigns or a "Design" group with access to media but not to sensitive content.

To create a Custom User Group: