Copying rights from role to role

This topic provides instructions on copying rights from one role to another.

To understand the concept of roles, see Managing-roles.

To copy rights, on the Admin > User Admin > Roles > Manage Rights > By Role page, follow these steps:

1. In the Copy From field, select the role from which you want to copy access rights. If you have the Allow Rights Promotion system right, you will be able to choose from any role not restricted to the reporting system. If you lack this right, you will be able to choose from roles you belong to.
2. Select the options for the type of rights to be copied:
   1. Select System Rights to copy the system rights from the selected role.
   2. Select Static Group Access Control Lists to copy the group Access Control Lists (ACLs) from the selected role for all groups you can edit.
      This option appears only when the Enable Static Group Access Control Lists system parameter is enabled. See Managing-system-parameters.
   3. Select Rule Set Access Control Lists to copy the rule set ACLs from the selected role for all rule sets you can edit
      This option appears only when the Enable Rule Set Access Control Lists system parameter is enabled. See Managing-system-parameters.
   4. Select Template Access Control Lists to copy the template ACLs from the selected role for all templates you can edit.
      This option appears only when the Enable Template Access Control Lists system parameter is enabled. See Managing-system-parameters.
   5. Select Select Network Rights for Realm and choose the realm from which to copy all network rights
      The realms listed are those to which the specified role has access. You must select an option to copy rights from all realms listed (All Realms) or to copy rights from a set of realms you specify (Select Realm(s)).
      This option appears when the role you selected in the Copy From field does not have the full set of network rights.
   6. Select Full Network Rights to copy the full set of network rights from the selected role.
      This option appears only when the role you selected in the Copy From field has the full set of network rights.
3. In the Copy To field, select the role to which you want to copy the specified access rights. You are allowed to choose from the roles you can edit (except roles with full network rights, which are excluded to prevent too-easy revocation of a major privilege). If copying network rights, select to copy into all realms or one or more selected realms.
   
4. Click Save.
   Note that copying rights means that the Copy To role gets identical rights as the Copy From role; that is, rights are added to and removed from the Copy To role so that its rights are the same as those in the Copy From role. Thus, this is an overwrite operation.