In the Discovery Service configuration location, you can edit the Ambient Data Framework configuration file, cd_ambient_conf.xml, to manage user accounts and their roles. This topic explains the roles that exist and the rights they grant the user.
Roles
| Role name | Meaning |
|---|
cm | Access to features relevant for Content Manager |
cd | Access to features relevant for Content Delivery |
provider | Features relevant for a service provider |
implementer | Features relevant for an implementer |
Note: The user account (client ID) configured client-side, either in your client configuration file cd_client_conf.xml or in your Web.config file, must always have the cd role.
Discovery Service features
| Feature | Resource | Access level | Right for cm | Right for cd | Right for provider | Right for implementer |
|---|
| Token Service endpoint | /token.svc | POST. GET | yes | yes | yes | yes |
| Setting Capabilities | /Environment/**Capability | POST, PUT, DELETE | no | no | yes | no |
| Retrieving Capability locations | /Environment/**Capability | GET | yes | yes | no | yes |
| Retrieving Web applications | /**/WebApplications** | GET | yes | yes | no | yes |
| Retrieving Publication mappings | /**/PublicationMappings** | GET | yes | yes | no | yes |
| Setting Web applications | /**/WebApplications** | POST, PUT, DELETE | yes | no | no | no |
| Setting Publication mappings | /**/PublicationMappings** | POST, PUT, DELETE | yes | no | no | no |
| Batch endpoint | /$batch | GET, POST, PUT, DELETE | yes | no | no | no |
| Target** entities | /**/**Target** | GET | yes | yes | yes | yes |
| Target** entities | /**/**Target** | POST, PUT, PATCH, DELETE | yes | no | yes | no |
Content Service features (for cd and implementer only)
| Feature | Access level | Right for cd | Right for implementer |
|---|
| General access | GET | yes | yes |
| Actions that require POST | POST | yes | yes |
Preview Service features
| Feature | Access level | Right for cm | Right for cd | Right for provider | Right for implementer |
|---|
| Publish data | POST, PUT | yes | no | no | no |
| Retrieve preview data | GET | yes | yes | no | yes |
Content Deployer features
| Feature | Resource | Access level | Right for cm | Right for cd |
|---|
| Publish content | /httpupload | GET, POST | yes | no |
| General access | /deployer/isAlive | GET | yes | yes |
UGC features (UGC is deprecated)
| Feature | Access level | Right for cm | Right for cd | Right for provider | Right for implementer |
|---|
| Moderate content | GET, PUT, POST, DELETE | yes | yes | no | yes |
Context Engine Service features
| Feature | Access level | Right for cd | Right for implementer |
|---|
| General access | GET | yes | yes |
Contextual Image Delivery features
| Feature | Access level | Right for cd | Right for implementer |
|---|
| General access | GET | yes | yes |