API permissions matrix: Portal & Admin actions

For administrators and API integrators, this guide details API-enforced permissions for Admin and Portal surfaces to help you assign tokens correctly and prevent unintended access.

When you create or configure an API token, you assign permissions that control which entities and actions the token can access. The tables below map entities (Media, Users, Settings, etc.) to actions and list the exact permission(s) required for each operation. UI-only settings and behaviors are out of scope.

For details on setting up and managing API tokens, see the API Management page.

In this article:

Action definitions

Admin permissions actions

Portal permissions actions

Action definitions

Action	Definition
List	View a list of entities (e.g., media, users).
View	Access and read the details of an entity.
Create	Add a new entity.
Edit	Modify an existing entity.
Delete	Remove an entity (soft delete, reversible). Also covers actions such as: undelete, enable, disable, and approve.
Purge	Permanently remove an entity (irreversible). This action is only available for a limited set of entities - specifically, Media and Users. For all other entities, permanent deletion is not supported; only soft deletion (reversible) is possible. These cases are marked as '-'.

This matrix covers only API-enforced permissions. UI-only features and flags are excluded.

Admin permissions actions

Admin permissions control access to the Admin portal - a separate app with its own domain and login system used for system configuration and hosting live events. 2025_08_18_16_48_38_ClockфіІ.png

Important: AccessToAdministration permission is required for admin-side actions. Without this permission, other administrative permissions have no effect.

These permissions are independent of Portal permissions.

Item	Description	List	View	Create	Edit	Delete	Purge
Media	Videos, audio, thumbnails, playlists, attachments, descriptions.	Public	Public	`ContentAdmin`	`ContentAdmin`	`ContentAdmin`	`ContentAdmin`
Configuration	A gathered section for settings such as Whitelist domains, Branding, API tokens, languages (autotranslate languages), and Roles.	Public	Public	-	`ManageSettings`	-	-
Roles	A set of permissions assigned to users.	Public	Public	`RolesAdmin`	`RolesAdmin`	`RolesAdmin`	-
Autotranslate languages	Languages that will be available to the viewer as auto-translate languages in the video pages.	Public	Public	Public	`ManageSettings`	Public	-
Users	RMP profiles that have access to the system.	Public	Public	`ManageUsers`	`ManageUsers`	`ManageUsers`	`ManageUsers` + `PurgeUsers`
Tags	Allows for managing media tags.	Public	Public	`TagsAdmin`	`TagsAdmin`	`TagsAdmin`	-
Captions	Submitted automatic transcript generation for a video. Also applies to Cue points.	Public	Public	`ContentAdmin`	`ContentAdmin`	`ContentAdmin`	-
Groups	Allows the user manage a group.	Public	Public	`GroupsAdmin`	`GroupsAdmin`	`GroupsAdmin`	-
Categories	A folder for the media to sort on the Portal (by theme etc).	Public	Public	`CategoriesAdmin`	`CategoriesAdmin`	`CategoriesAdmin`	-
Retention	Allows setting the retain flag for media items. These are the flag only permissions that do not block media deletion by other users.	-	-	`SetRetainItem`	`SetRetainItem`	`SetRetainItem`	-

Portal permissions actions

Portal permissions control what users can do within the Private Portal application - whether they're end users consuming content, content managers, or anyone else accessing and interacting with Portal features. These permissions are independent of Admin permissions.

Public portal: No permissions required.

Item	Description	List	View	Create	Edit	Delete	Purge
Metadata	Allows for labeling and categorizing media content, making it easier to search for specific videos and sort content by criteria.	Public	Public	Public	Public	Public	-
Download button	Allows for downloading content for content items that have downloading enabled. Applied to the Download modal on the media details page.	-	`DownloadContent`	-	-	-	-
Comments	Portal comments on media. Users may always edit or delete their own* comments.* EditComment is required to modify or delete comments created by other users.	Public	Public	`Comment`	`Comment` + `EditComment`	`Comment` + `EditComment`	-
Content rating	Allows for rating of media and comments.	Public	Public	`Rate`	`Rate`	`Rate`	-
Groups	Allows for managing a group.	-	-	`CreateGroup`	- checks the role of the group (admin)	-	-
Content link	Allows media owners to generate a portal URL for the media.	-	-	`ShareLink`	-	-	-

Some flags in the Roles section only affect the UI or notifications (e.g., ReviewContent ). These do not control backend/API access and are excluded from the matrix.

Assign UI-only flags to human users as needed - they have no effect for API roles.

Search

Ravnur Knowledge Base

Action definitions

Admin permissions actions

Portal permissions actions