1. Security

The SXA security roles

Version:

Security roles give your users different access rights to different areas of tenants and sites. When you set up security for a tenant and site, SXA automatically adds the SXA Admin, SXA Author, and SXA Designer roles into the SXA domain. These roles inherit Sitecore roles and are used to base the following Tenant and Site roles on:

  • Tenant Member
  • Tenant Author
  • Tenant Designer
  • Tenant Admin
  • Site Member
  • Site Author
  • Site Designer
  • Site Admin

The following table describes the general SXA roles and their rights for working with tenants:

Tenant MemberTenant AuthorTenant DesignerTenant Admin
sitecore\Content\Tenant folder\TenantWrite (including descendants)
sitecore\Media Library\Project\TenantWrite (including descendants)
sitecore\Media Library\Project\Tenant\Site\sharedWrite for descendants
Sitecore\templates\Project\TenantWrite for descendantsWrite (including descendants)

The following table describes the general SXA roles and their rights for working with sites:

Site MemberSite AuthorSite DesignerSite Admin
sitecore\Content\Tenant folder\Tenant\Site folder\SiteWrite (including descendants)
sitecore\Content\Tenant folder\Tenant\Site folder\Site\HomeWrite (including descendants)

No right to delete or rename
sitecore\Content\Tenant folder\Tenant\Site folder\Site\ MediaWrite for descendants
sitecore\Content\Tenant folder\Tenant\Site folder\Site\DataWrite for descendants
sitecore\Content\Tenant folder\Tenant\Site folder\Site\PresentationWrite for descendants
sitecore\Content\Tenant folder\Tenant\Site folder\Site\Settings
sitecore\Media Library\Project\Tenant folder\Tenant\Site folder\SiteWrite for descendantsWrite (including descendants)
If you have suggestions for improving this article, let us know!