Feature permissions

You can manage permissions more efficiently using the Features tab. Instead of adjusting individual settings across Object Security, Tab Visibility, and Other Settings, you can enable permissions by feature.

Features represent key system capabilities such as Preservation, Production, Imaging, and Configure Doc Review. Each feature groups together the necessary permissions from the three tabs. When you enable a feature, all related permissions are automatically applied.

To achieve this, all permission changes must now be made through Feature Permissions instead of the older granular settings in Object Security, Tab Visibility, and Other Settings/Admin Operations. The modernization of Feature Permissions simplifies permissions management and creates consistency across workflows. This update ensures that feature behavior is standardized and easier for end users to understand and use.

Feature Permissions are rolling out through a phased modernization. Migration tooling supports controlled adoption with full audit visibility.

During migration, each feature exists in one of two states:

• Modernized— Feature Permissions controls all permissions for the feature. Granular permissions are locked, and the feature toggle governs them. You cannot directly edit permissions in Object Security, Tab Visibility, or Other Settings.

• Non-modernized— Legacy behavior remains. You can continue to modify granular permissions in Object Security, Tab Visibility, and Other Settings, and those changes appear on the Features tab.

When you enable or disable a feature, Feature Permissions applies or revokes the entire set of dependent permissions in a single action. This simplifies configuration and reduces the risk of misaligned settings.

Currently modernized features

Below you will find the current Feature Permissions that are modernized. When a feature is modernized, its associated Object Security, Tab Visibility, and Admin Operations permissions are locked and can only be modified through the Feature Permission toggle. For more information, see Modernized features.

= Shared granular permission

Modernized Feature Permission	Level	Object Security	Tab Visibility	Admin Operations / Other
aiR Review	Instance	None	aiR Review Jobs	View Admin Repository
Application Management	Instance	Library Application – View OAuth2 Client – View, Add, Edit, Delete, Secure Resource File – View, Add, Edit, Delete, Secure Custom Page – View, Add, Edit, Delete, Secure Sanitizer – View, Add, Edit, Delete, Secure Relativity Script – View	Application Library Authentication OAuth2 Client Resource Files Custom Pages Sanitizer Applications & Scripts Relativity Script Library	View Admin Repository
Archive and Restore (ARM)	Instance	None	ARM ARM Jobs Configuration	View Admin Repository
Audit	Instance	Data Grid Audit – View Relativity Script – View	Audit Applications & Scripts Audit Migration Reports	View Audits View Admin Repository
Authentication	Instance	Authentication Provider – View, Edit, Add, Delete, Secure Authentication Provider Type – View Login Method – View, Edit, Add, Delete, Secure Group Claim Mapping – View, Edit, Add, Delete, Secure Required Claim – View, Edit, Add, Delete, Secure JIT Settings – View, Edit, Add, Delete, Secure Federated Instance – View, Edit, Add, Delete, Secure	Authentication Authentication Provider Authentication Provider (legacy) Authentication Provider Type Federated Instance	View Admin Repository
Case Metrics	Instance	Schedule – View, Edit, Add ScheduleReport – View, Edit, Add ScheduleReportField – View, Edit, Add ScheduleReportFilter – View, Edit, Add	Case Metrics Reports Scheduler	View Admin Repository
Client and Matter Management	Instance	Client – View, Edit, Add, Delete, Secure Matter – View, Edit, Add, Delete, Secure	Clients Matters	View Admin Repository
Cost Explorer	Instance	None	Cost Explorer Management Console	View Admin Repository View Cost Explorer
Data Transfer	Instance	None	Staging Explorer	View Admin Repository Access Staging Explorer Send Email Notification
Instance Configuration	Instance	View – View, Edit, Add, Delete, Secure Field – View, Edit, Add, Delete, Secure + Add Field Choice By Link Object Type – View, Edit, Add, Delete, Secure Object Rule – View, Edit, Add, Delete, Secure Layout – View, Edit, Add, Delete, Secure Tab – View, Edit, Add, Delete, Secure Choice – View, Edit, Add, Delete, Secure Dashboard – View, Edit, Add, Delete, Secure Agent – View, Edit, Add, Delete, Secure Agent Type – View, Edit, Add, Delete, Secure InstanceSetting – View, Edit, Add, Delete, Secure	Admin Workspace Configuration Views Fields Object Type Choices Dashboards Tabs Tab Sync Agents Server & Agent Management Instance Settings	View Admin Repository Delete Object Dependencies Manage Object Types Agent Operations
Job Queues	Instance	None	Queue Management OCR Queue PDF Queue Processing and Imaging Queue DtSearch Queue Admin Import/Export Queue Branding Queue Branding Queue Legacy Production Queue Production Queue Legacy Processing Administration Processing History Translate Jobs kCura Admin Workspace Upgrade Queue Text Migration Jobs Text Migration Reports Transcription Queue	View Admin Repository Change Queue Priority
Migrate	Instance	Migrate Migration – View, Edit, Add, Delete, Secure Migrate Restore Job – View, Edit, Add, Delete, Secure Migrate Source Instance – View, Edit, Add, Delete, Secure	Migrate	View Admin Repository Access Migrate
Security Center	Instance	None	Security Center	None
Staging Reports	Instance	None	Staging Reports Management Console	View Admin Repository View Instance-wide Staging Reports View Client Domain Staging Reports
Usage Reports	Instance	None	Management Console	View Admin Repository View Instance-wide Usage Reports View Client Domain Usage Reports
Users and Groups Management	Instance	User – View, Edit, Add, Delete, Secure Group – View, Edit, Add, Delete, Secure Client – View Authentication Provider – View Authentication Provider Type – View Login Method – View, Edit, Add, Delete	Groups Users User and Group Management Centralized Authentication User Status	View Admin Repository Send Message Force Logout on User Status
Workspace Management	Instance	Workspace – View, Edit, Add, Delete, Secure Client – View Matter – View, Add Resource Pool – View	Workspaces	View Admin Repository Manage Cold Storage

This table is updated as additional features move to the modernized state. Check back regularly or review the release notes for the latest changes.

Considerations

Keep these factors in mind when setting Feature permissions:

• For modernized features, the Feature Permission becomes its own unique entity and is no longer simply a stateless collection of the granular permissions associated with that feature. Once modernized, the Feature Permission can only be granted or revoked by modifying the value of the Feature Permission directly and will never be changed based on modification of the granular permissions.
• For non-modernized features, any change modifications should happen in the Feature tab, but are still available for granular permission settings on the Object Security, Tab Visibility, and Other Settings tabs.

Using the Features tab

The Features tab lists the features available for the selected group. Each feature shows its current state for that group.

To apply a preset to a feature:

1. Find the feature in the list.
2. Click See details. A panel opens on the right.
3. Select a preset.
4. Click Review and Save.
5. Review the changes, then click Save.

Some features control only a few permissions and do not offer presets. Select the checkbox next to the feature to grant access. Clear the checkbox to remove access.

You can also do the following from the Features tab:

• Use the Search bar to find a feature in the list.

• In a feature's See details panel, click Granular permissions mapping. A read-only reference shows the granular permissions behind each preset.

Feature actions

Example: the Audit feature includes two actions: View Audit and View Audit Migration Reports.

Key details about actions:

• Each action maps to one or more granular permissions, managed by Relativity.
• Actions are additive. Selecting an action grants access to its task. It does not remove access granted by other actions or features.
• Each action belongs to one feature. The same action does not appear in another feature.

Presets

A preset is an optional group of related actions. It gives you a starting point for a feature. When you select a preset, Relativity selects the actions defined for that preset. You can then select or clear individual actions before you save.

Most features with presets offer Viewer and Administrator. Staging Reports and Usage Reports offer Client Domain and Instance-wide. Some features have no preset. For those, select all actions, or select individual actions.

Feature states

A feature’s state for a selected group depends on how many actions are enabled:

• Disabled: None of the feature’s actions are selected.
• Partially Enabled: Some, but not all, actions are selected.
• Enabled: All of the feature’s actions are selected.

A feature with no actions has only two states: Disabled or Enabled.

Viewing the legacy permissions mapping

Some features map their actions to granular permissions. To see this mapping, open the feature's See details panel. Click Granular permissions mapping. The mapping is a read-only reference. It shows the granular permissions behind each preset or action.

The mapping uses these icons:

• Enabled permission — the group has this granular permission.
• Disabled permission — the group does not have this granular permission.
• Permission used by multiple Features — more than one feature includes this permission.
• Permission not found by name — a tab permission was renamed. Relativity cannot identify it by the new name, so Relativity does not modify this permission.

Configuring feature actions for a group

1. Open permissions for the group. For steps, see Setting instance permissions.
2. In the Features list, find the feature.
3. Click see details.
4. Select a preset, or select individual actions
5. Click Review and Save.
6. Review the listed changes, then click Save.

Feature permission behavior

Feature permissions and granular permissions represent the same access from different perspectives. How changes are applied depends on whether the feature has been modernized.

Behavior for all features

These behaviors apply to every feature, whether or not it is modernized:

• A selected feature checkbox—grants every granular permission the feature includes.
• A selected action—grants only the granular permissions mapped to that action. Other actions and features keep the access they already grant.
• A cleared feature checkbox—revokes the feature's granular permissions, except any that another enabled feature also includes.

A modernized feature locks its granular permissions, so you cannot change them directly. Changing a granular permission is therefore the one behavior that applies only to features that are not modernized.

Non-modernized features

For non-modernized features, access can be managed from either the Features tab or the Object Security, Tab Visibility, and Other Settings tabs. The standard feature behaviors described above still apply. You can also enable or disable granular permissions directly. When you do, the state of every enabled feature that includes that permission is updated. A feature is considered enabled only when all of its associated permissions are enabled.

Keep the following behaviors in mind:

• Shared permissions may remain enabled after a feature is disabled.
  A granular permission can belong to multiple features. If you disable one feature, but another enabled feature still includes the same permission, that permission remains enabled.

• Disabling a feature does not restore previous access levels.
  Enabling a feature grants all permissions included in that feature, including permissions the group may not have had previously. When the feature is later disabled, all of those permissions are revoked, not just the ones added by enabling the feature. Review the Review Permissions Changes dialog carefully before saving your changes.

Modernized features

As features move to the modernized state, the way you manage permissions for them changes. The Features tab becomes the only way to change access. The feature permission is its own entity rather than a collection of the granular permissions behind it. Relativity locks those granular permissions and manages them, so you cannot change them on the Object Security, Tab Visibility, or Other Settings tabs. Only the behaviors for all features apply.

Legacy granular permission pages, such as Object Security, show a banner directing you to make permission changes on the Features tab.

Granular permissions you can change

Whether you can change a granular permission depends on the features it belongs to:

Granular permission	Feature state	Can you change it
Not modernized—belongs to no modernized feature	Any	Yes
Fully modernized—belongs only to modernized features	Any	No
Partially modernized—belongs to both modernized and non-modernized features	At least one modernized feature is enabled	No
	All modernized features are disabled	Yes

A fully modernized granular permission is read-only. A tooltip names the feature permission to use instead.

A partially modernized granular permission is read-only while at least one of its modernized features is enabled. A message names the feature permissions that require it.

Shared granular permissions

A granular permission shared across multiple features does not always reflect the state of any one of them. The See details panel lists every granular permission a feature includes, and a blue link icon marks the shared ones.

Frequently asked questions

Workspace-level permissions

Set administrator or user permissions at the feature level. The tables below show the specific permission settings included in each feature at the workspace-level.

For more details on setting feature permissions, refer to Setting workspace permissions.

None stands for Not Applicable