---
schema_version: "1"
id: ac49df93e1db6a9042a0c09c0fd1dbe8b35862349bf2285399b3b942cc815c10
title: Role-Based Access in Salesforce CMS
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/cms_access_control_overview.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.cms_access_control_overview.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 301ee390fbb7018fd5d3e7da156548b8d3d18f3dd1c46158eaed83c85d8c2fe8
description: Use role-based access to control who does what in each CMS workspace. Contributors are users or public groups in your org that you add to your CMS workspace. Contributors can belong to more than one workspace and have specific roles in each workspace, according to the level of access they need.
products:
  - Salesforce CMS
  - Cross Cloud
release: "264"
---
# Role-Based Access in Salesforce CMS

Use role-based access to control who does what in each CMS workspace. Contributors are users or public groups in your org that you add to your CMS workspace. Contributors can belong to more than one workspace and have specific roles in each workspace, according to the level of access they need.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr></tbody></table>

Content admin

These contributors have access to all content in the CMS workspace and can manage contributors and content sharing.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-communities_managed_content-264-0-0-production-enus/8b149fc1-875c-4018-8e9e-2843a2196457/images/icon_note.png)

Note If you used CMS for Experience Cloud previously, as part of your migration to Salesforce CMS, we automatically assign a content admin role to existing Digital Experiences users with Create and Setup Experiences permissions.

Content manager

These contributors have full access to all content in the CMS workspace.

Content author

These contributors can create, edit, and view content in the CMS workspace. They can’t publish content.

A contributor can have a content admin or a content manager role. Content admins have access to all content in the CMS workspace, and they can manage workspace languages, workspace contributors, content translations, and content sharing. Content managers have access to all content in the CMS workspace, including creating content, publishing content, and marking content for translation. Your Salesforce admin can control who has access to what in all of the Digital Experiences app (previously named Salesforce CMS) and your Experience Cloud sites.

![Example](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-communities_managed_content-264-0-0-production-enus/8b149fc1-875c-4018-8e9e-2843a2196457/images/icon_example.png)

Example AWZ Computing has four Experience Cloud sites: two internal and two external for two different regions. Their Salesforce admin wants to provide authoring and sharing ability by region and by campaign. They create three workspaces: one for their two external sites, which use the same content, one for their internal sites, and a temporary one for a targeted campaign.

They add an admin to each workspace, besides themselves, to help manage the workspace, and they add content managers who author content. Because of the potentially sensitive nature of the content, only the Human Resources group needs access to administer and contribute to the workspace for the internal communications. Content admins can administer a workspace and create content for it, so they make the HR group the only content admins for the Internal Communications workspace other than themselves.

Later, HR contacts the Salesforce admin to explain that they’re working on an incentive program tied to their fall campaign. To reach the eligible people with the information, they want to add content and information to the Fall US Campaign workspace. Because contributors can have different roles in different workspaces, the Salesforce admin makes the HR group content managers in the Fall US Campaign workspace. This role provides them authoring rights, but not full control of the workspace.

The Salesforce admin created a matrix they can update as business needs change.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
            <colgroup>
              <col style="width:33.33333333333333%">
              <col style="width:33.33333333333333%">
              <col style="width:33.33333333333333%">
            </colgroup>
            <thead class="slds-text-title_caps ">
              <tr class="">
                <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d10046e114">CMS Workspace Name</th>
                <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d10046e116">Channels </th>
                <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d10046e118">
                  <p>Contributors </p>
                  <p style="margin-bottom:0;">(Users and Public Groups)</p>
                </th>
              </tr>
            </thead>
            <tbody>
              <tr class="">
                <td data-label="CMS Workspace Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e114 ">External Sites</td>
                <td data-label="Channels" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e116 ">
                  <p>North America </p>
                  <p style="margin-bottom:0;">Europe </p>
                </td>
                <td data-label="Contributors (Users and Public Groups)" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e118 ">
                  <p>Salesforce admin</p>
                  <p>Site admin as content admin</p>
                  <p style="margin-bottom:0;">Marketing writer as
                    content manager</p>
                </td>
              </tr>
              <tr class="">
                <td data-label="CMS Workspace Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e114 ">Fall US Campaign</td>
                <td data-label="Channels" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e116 ">
                  <p>North America </p>
                  <p style="margin-bottom:0;">Company intranet</p>
                </td>
                <td data-label="Contributors (Users and Public Groups)" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e118 ">
                  <p>Salesforce admin</p>
                  <p>Site admin as content admin</p>
                  <p>Marketing writer as
                    content manager</p>
                  <p style="margin-bottom:0;">HR as content manager</p>
                </td>
              </tr>
              <tr class="">
                <td data-label="CMS Workspace Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e114 ">Internal Communications</td>
                <td data-label="Channels" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e116 ">
                  <p>Company intranet US</p>
                  <p style="margin-bottom:0;">Company intranet EMEA</p>
                </td>
                <td data-label="Contributors (Users and Public Groups)" class="slds-cell-wrap" style="vertical-align:top;" headers="d10046e118 ">
                  <p>Salesforce admin</p>
                  <p style="margin-bottom:0;">HR as content admin</p>
                </td>
              </tr>
            </tbody>
          </table>

- **[Add Contributors to a CMS Workspace](https://help.salesforce.com/s/articleView?id=xcloud.cms_access_control_contributors.htm&release=264.0.0&type=5)**  
    In the Digital Experiences app (previously named Salesforce CMS), add users or public groups as contributors to a specific CMS workspace by assigning them an access role. A contributor’s access role is specific to a CMS workspace.
- **[Change a Contributor’s Access Role](https://help.salesforce.com/s/articleView?id=xcloud.cms_access_control_change_contributor.htm&release=264.0.0&type=5)**  
    You can change a contributor’s access role to increase or decrease the level of access. A contributor’s access role is specific to a CMS workspace, so you must change the contributor’s role in each assigned workspace. Admins can’t change their own role.
- **[Remove a Contributor from a CMS Workspace](https://help.salesforce.com/s/articleView?id=xcloud.cms_access_control_remove_contributor.htm&release=264.0.0&type=5)**  
    If a contributor leaves your company or is transferred to a different team, you can remove the contributor from a CMS workspace. The user or public group is removed from the workspace but not from Salesforce.

#### See Also

- [Role-Based Access in Experience Builder](https://help.salesforce.com/s/articleView?id=experience.networks_access_control_overview.htm&type=5&language=en_US)
- [Control Chatter Access Through Permission Sets](https://help.salesforce.com/articleView?id=collab_pbr_perm_sets.htm&type=5&language=en_US)