The Administration section allows
you to manage:
User accounts - user names, passwords, etc.
Roles - typical roles (groups) of users.
Permissions - permission matrix showing global permissions assigned to roles.
Deleted Documents - deleted documents that can be restored.
The following picture shows the security system schema:
Here's the explanation:
The user is member of any number of roles.
Role is granted with any number of permissions.
Permission (or better - "permission name") belongs either to document template or to module.
Note 1:
Module represents a part of Kentico CMS Desk or part of your plug-in whose permissions you want to manage.
Note 2:
Each module as well as each document template have their own permission matrix.
Note 3:
The document template- and module-permissions add up with document-level permissions - see Document Permissions.
You can find the list of standard roles, permissions and how they affect the Kentico CMS Desk in the Standard Security Settings chapter.