---
title: Permissions for functions
slug: cms-13/docs/permissions-for-functions-ui
createdAt: 2026-07-30T20:22:10.345Z
---

:::hint{type="info"}
**Note**
This topic is for CMS administrators and developers with administrative access rights.
:::

Use **Permissions for Functions** to control which users and groups can access specific system operations in CMS. Examples include moving content between providers and viewing detailed error messages. Restricting function access to specific groups reduces the risk of accidental data moves or exposure of sensitive error details. This feature is separate from content access rights, which control which pages and blocks a user can read or edit. To manage permissions for functions with code, see [Permissions for functions with code](docId\:ZyQ4ikODygXeG57HIdPHj).

Go to **Settings** > **Permissions for Functions**. The **Permissions for Functions** window lists all available functions, each with a brief description of its purpose. For example, `ContentProviderMove` lets users move data or pages, and `DetailedErrorMessage` provides detailed error messages for troubleshooting.

To configure a function, click the function name. A second window lists the users and groups that already have permissions for the function.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/f4OeG6cws1PFXZV6Bg8fv_7cb38cc223615550558eb3efa10fbbb9833501c2a38febd04767ab977bdf4988-image.png)

To grant access to additional users or groups, click **Add User/Group**. A drop-down list of available users and predefined groups in your Optimizely instance displays. Select a user or group. Repeat to add more.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/EkTqk7sDUiLR075AHpG-L_81b3f6592990b3667855f513daec3a7c21126278bcd2cbe89dc2b6f49a823369-image.png)

The following built-in users and groups are available in Optimizely:

- **Anonymous** – Unauthenticated users.
- **Authenticated** – All logged-in users.
- **CmsAdmins** – Users with administrative privileges for CMS.
- **CmsEditors** – Users with content editing capabilities.
- **Everyone** – All users, regardless of authentication status.

Click **Save Permissions for Function**. The selected users and groups gain access to the specified function.

To remove a user or group, click **Delete** in that row. Click **Save Permissions for Function** to apply the change.