Skip to content

Administration

Administration (Administración) configures the DMS taxonomy, users, access, document rules, and system settings. It has 19 panes, grouped below.

Taxonomy and documents

Pane Use it for
Overview Administration landing page (this page)
Search configuration Search modes and fields per repository or group
Repositories Repositories that hold documents
Document groups Groups that route documents by operation or client
Document types Type definitions, path templates, and title templates
Metadata Metadata forms, fields, aliases, and BPM variable mapping

Users and access

Pane Use it for
Users User accounts
Security groups Groups that grant ACL entries
Departments Department hierarchy and heads
Branches Branches and locations
Roles and permissions The ACL matrix for users and groups
Access rules Visibility and sharing rules
Upload restrictions Restrict file types, groups, or repositories by user, group, or department

Lists, queries, and system

Pane Use it for
Document lists Sidebar lists and their columns
Custom queries Pre-built queries assigned to areas
Configuration General, authentication, system, Redis, worker, and BPM settings
System status Health of the database, Redis, storage, antivirus, worker, and resources
Task queue ARQ, OCR, LDAP/AD, and BPM upload jobs
BPM Statistics The BPM statistics page

Access model

DMS uses ACL entries with a resource, an action, and an allow or deny effect. Users can receive permissions directly or through security groups. Deny rules override allow rules, wildcards are supported, and *:* is the superadmin grant.

The Roles and permissions pane is an ACL matrix, not a role-inheritance model. Additional access layers include sharing rules, case-level restrictions, restricted repositories, internal taxonomy visibility, and confidential metadata fields.

Not part of this guide

Some code paths are not user-facing and are intentionally excluded:

  • API-key management and storage quotas exist only as APIs, without a web UI.
  • AI extraction is not exposed in the current UI.
  • The legacy bpm-mapeo pane and the Integraciones placeholder are superseded.
  • The standalone BPM import page is embedded in Configuration; its duplicate full-page routes are not documented.
  • Internal diagnostic routes are not part of the user guide.

Permissions

Each pane has its own permission, such as usuario:ver, rol:ver, metadata:ver, configuracion:ver, or audit export permissions. Access is checked by the page and by the API.