You can create and edit objectpermissionsin conjunction with CustomRoles to meet the organizational needs of a large digital signage network where pricing and offerings may vary by regions and/or stores. In this scenario, you may need to limit or allow access according to the objects (media files, dynamic playlists, etc.) themselves.
...
Permissions settings for users have higher priority than those for roles, and permissions for objects have higher priority than those for operations. For example, if the Presentation Creators are restricted from creating Live Text feeds, but full control for the role is enabled for a certain Live Text feed, then the allowance for that specific object takes precedence over the general restriction for Presentation Creators.
...
Object Permissions
...
Examples
...
Store Managers
A company may want to let store managers decide which deals to promote so managers need to view various presentations and schedule them for the players in their store. However, if you assign them to a Custom Role based on Publishers, they would have access to the presentation schedules of all stores and might accidentally delete or modify those schedules for other stores.
Create a Custom Role based on Publishers.
Assign all of the store managers to this role.
Change the role so that the actions View Groups and Update Schedule in the Group category are denied.
Make sure that each group of players reflects a different store location ???
Change the object permissions of each group on the network so that each user assigned to the custom Publishers role can only view and modify the group corresponding to his or her store ???
You can also assign object permissions based on individual players. This is helpful if you already organize groups in some other way (by region, by store type, etc.).
...