The creation of new Roles or modification of roles should follow these guidelines:

1.1 New Roles:

Requested by Area Experts / Users

  • The policies and guidelines in Requesting a New Role / policy should be followed.
  • The new role should be clearly documented including what Capability sets and Capabilities should be included as well as the desired outcome.
  • Area experts should be consulted to ensure that the new role matches their expectations as well as to approve its use for Users.

New Functionality

  • New functionality / Apps are not added by default. Before these applications can be made generally available the Area experts should be consulted, allowed to test and determine if the App or new functionality should be made generally available. The FOLIO Application manager and the FOLIO Security Sub-Committee will make a determination of who is over the new functionality and reach out to them.

1.2 Changing Roles:

Requested by Users:

  • The policies and guidelines in Requesting a Change to an Established Role / Policy should be followed.
  • All changes should clearly document including what Capability sets and Capabilities will be changed as well as the desired outcome.
  • Area experts should be consulted to ensure that the role matches their expectations as well as to approve its use for Users.

Based on Platform Changes:

Because of platform changes, the addition of new applications and functionality it may be necessary for the FOLIO Security Sub-Committee to change Roles to ensure they are still performing as specified by the area experts. 

  • The FOLIO Security Sub-Committee will determine if any Capability sets or Capabilities will need to be adjusted at each flower version. 
  • If changes are required they will make those changes on the test system to ensure they work correctly before applying them to the production system. 
  • if the changes will dramatically change the current Roles functionality the Area experts must be consulted. 


1.3 Removing Rules

Requested by Area Experts / Users


Based on Platform Changes:


Determined obsolete:

The FOLIO Application Manager in combination with the FOLIO Security Sub-Committee can determine a rule is no longer needed or being used. Once this determination is made a communication will be sent to all interested parties to inform them of the remove of the rule. If after 2-weeks time there are no objections the rule will be removed from the system and any user migrated to a new rule if required.


  • No labels