I am unable to get the Annotate function working for a non-SuperUser.
Annotation button for SuperUser

My test user sees this (note missing Annotation option):
No Annotation option

And has a group with these policies:
Security rights for test group

Things I've tried:

  • Enabling all rights on M.Asset.
  • Enabling full CRUD on M.File and M.Annotation.
  • Giving Read to all Annotate related portal pages.
  • Adding ANY access for all the "builtin" groups.
  • Cleared all caches.
  • Restarted the sandbox.

Version 3.4.6.

1 Answer 1


You need to set the rule for both entity definitions M.Asset and M.File, and then you have to select ReadAnnotations and CreateAnnotations permissions.

enter image description here

Your portal pages rule is fine, but remove the rules you did for M.Annotations, M.File, M.Asset and use the the rule I detailed. That should give your user annotation read/write permission.

  • Confirmed! i.imgur.com/Cd9LvI4.jpg Jun 9, 2022 at 18:40
  • Note that in addition to the rights in my screenshot, and the one's Eric shared, I also needed to add M.Builtin.ContentAdministrator. When I've had a chance to pin down the minimal set of rights to get this to work, I'll post a second answer. Jun 9, 2022 at 19:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.