Table 1.

Control of data access using the OMERO Permissions system

User role	Group Member				Group Owner				Administrator
Group type	Private	Read-Only	Read-Annotate	Read-Write	Private	Read-Only	Read-Annotate	Read-Write	Private	Read-Only	Read-Annotate	Read-Write
Actions allowed on other users’ data
View		*	*	*	*	*	*	*	*	*	*	*
Annotate			*	*		*	*	*		*	*	*
Delete				*	*	*	*	*	*	*	*	*
Edit				*	*	*	*	*	*	*	*	*
Move									*	*	*	*

Table shows the allowed actions for different user roles in an OMERO system. Users always have full access to their own data; access by other Users is defined by placing data in Groups with different Permission levels. Table shows the actions users can perform (*) on data owned by another user within a Group. User Action definitions: View, view another User’s images and regions of interest (ROIs); Annotate, add annotations (rating, tags, attachments, comments, ROIs) to another user’s data; Delete, remove another user’s images, and associated metadata from the OMERO system; Edit, change image names and descriptions; Move, copy, or move another user’s data from one group to another