---
title: "Set up watermark permissions"
slug: "set-up-watermark-permissions"
abstract: "How to set up watermark permissions."
---
# Set up watermark permissions

The following example details how to set up watermark permissions so that users in the *Demo.ReadersOnly* user group have read-only access to watermarked assets. Because the *ViewNotWatermarked* permission is not selected, users can only view assets with a watermark. This watermark shows the name of the user viewing the asset (in this example\* Demo.Reader\*), and a date stamp that includes the current year and month.

![Example of watermarked assets](https://doc.sitecore.com/api/markdown-image/ch/en/users/content-hub/images/example_of_watermarked_assets.png)

> [!warning]
> If the user group permissions has the *ViewNotWatermarked* permission enabled, all users assigned to the user group can view assets without the watermark.

This walkthrough describes how to:

:::walkthrough
1. [Create and set up a watermark user group](https://doc.sitecore.com/ch/en/users/content-hub/set-up-watermark-permissions.html#create-and-set-up-a-watermark-user-group)
2. [Set up permissions](https://doc.sitecore.com/ch/en/users/content-hub/set-up-watermark-permissions.html#set-up-permissions)
3. [Add a user to the watermark user group](https://doc.sitecore.com/ch/en/users/content-hub/set-up-watermark-permissions.html#add-a-user-to-the-watermark-user-group)
:::

## Create and set up a watermark user group

The first step is to create a user group.

To create the watermark user group:

1. On the menu bar, click **Manage** :mdiCogOutline:.
2. On the **Manage** page, click **Users**.
3. On the **User groups** tab, click **Add user group**.
4. In the **Name** field, enter a name for the new group (for example, *Demo.ReadersOnly*).
5. To add the required [modules](https://doc.sitecore.com/ch/en/users/content-hub/assign-modules-to-users-and-groups.html "Assign modules to users and groups"), next to **Modules**, click **Add** :mdiPlus:.
6. In the **Modules** dialog, select the modules you want to add (for example, **Media**, **Content**, and **Product**), click **OK** and then click **Save**.

    > [!important]
    > It is necessary to select the appropriate modules so that users can access the required content. All users added to the group automatically get assigned the selected modules.

## Set up permissions

User group permissions determine what members of the group can access and the actions they can perform.

To set up permissions:

1. On the menu bar, click **Manage** :mdiCogOutline:.
2. On the **Manage** page, click **Users**.
3. On the **Users** page, click the **User groups** tab.
4. Next to the group for which you are defining permissions (for example *Demo.ReadersOnly*), click **Policies** :mdiCogOutline:.
5. Click **New rule** to [set up a rule](https://doc.sitecore.com/ch/en/users/content-hub/configure-a-user-group-policy.html "Configure a user group policy") and, in the **New rule** dialog box, select the check box next to the entity definition (for example, *Asset (M.Asset)* definition) and click **OK**.
6. Next to the *Rule for Asset (M.Asset)*, click **Add condition**.
7. From the **Choose definition** list, select *M.Final.LifeCycleStatus*, click **Select** and, in the **Select items** dialog box, select the *Approved* permission check box, and click **Select**.
8. Click **Add condition** again, choose the *M.Content.Repository* definition, click **Select** and, in the **Select items** dialog, select the *Standard* check box, and click **Select**.
9. Select the check box next to the *Read* permission.
10. Ensure that the check box next to the *ViewNotWatermarked* permission is not selected. This means that all members of the user group can only see images and PDFs with watermarks.
11. Click **Save**.

## Add a user to the watermark user group

Next, you need to add the user to the watermark user group.

To add a user:

1. On the menu bar, click **Manage** :mdiCogOutline:.
2. On the **Manage** page, click **Users**.
3. On the **Users** page, click the **User Groups** tab, in the search box, type the name of the user group to which you want to add a user (for example, *Demo.ReaderOnly*) and press Enter.
4. Next to the user group, click **View details** :mdiInformationOutline:.
5. Click **Edit** :mdiCogOutline:.
6. Next to **Users**, click **Add** :mdiPlus:.
7. In the **Users** dialog, select the check box next to the users you want to add to the group, and click **OK**.
8. In the **Confirm** dialog, click **Yes**.
9. Click **Save**.