Data Management Capabilities > Managing Part Structures > Windchill Options and Variants Capabilities > Assigning Expressions > Independent Assigned Expressions > Authorizing Team Members to Create Independent Assigned Expressions
  
Authorizing Team Members to Create Independent Assigned Expressions
This topic describes the permissions that are necessary for participants such as Team Members to create IndependentAssignedExpression objects.
The parent folder (Cabinet) for IndependentAssignedExpression objects resides in the System domain of the product, and the IndependentAssignedExpression object resides in the Default domain of the product. To create an object that resides in a folder, a participant must have Modify permission to the folder. Therefore, to create IndependentAssignedExpression objects, participants must be granted Modify permission on type Cabinet in the product System domain. To create a lifecycle-managed object such as IndependentAssignedExpression, participants are typically required to have Create permission for the object in its initial lifecycle state. Because of the current system limitation, participants are required to have Create permission in all states. To allow participants to create IndependentAssignedExpression objects, participants must be granted Create permission for type IndependentAssignedExpression for all states in the product Default domain.
An IndependentAssignedExpression is associated with business objects that implement the IndependentExpressionAssignable interface. In Windchill 10.2 M030, WTPart (which is access-controlled) implements this interface. When the associated object is saved to a different context, moved, or deleted, the same action is performed on the IndependentAssignedExpression. Because of these close relationships, it is recommended that you define policy rules for IndependentAssignedExpression similar to those defined for WTPart.
The following out-of-the-box access control policy rules grant Option Manager Full Control (All) permission for IndependentAssignedExpression and Cabinet objects.
For the organization context or Default/PDM domain:
Type: IndependentAssignedExpression
Permissions: + Full Control (All)
Participant: Option Manager
For the application context (for example, product) or System domain:
Type: Cabinet
Permissions: +Full Control (All)
Participant: Option Manager
In addition to these access control policy rules, the following rules are recommended for Team Members.
For the organization context, Default or PDM domain, or the application context (for example, product or Default domain):
Type: IndependentAssignedExpression
State: All
Permissions: +Read, +Create
Participant: Team Members
Type: IndependentAssignedExpression
State: In Work
Permissions: +Modify, +Delete, + Change Domain, + Create By Move, + Change Context
Participant: Team Members
Type: IndependentAssignedExpression
State: Released,
Permissions: +Revise,
Participant: Team Members
For the application context (for example, product) or System domain:
Type: Cabinet
Permissions: +Modify
Participant: Team Members
* 
Currently, the only out-of-the-box rule that authorizes Team Members for the type IndependentAssignedExpression is in the organization, Default, or PDM domain, granting Read permission.
In addition to the above policies, the user also needs to be a member of the Platform Structures group to be able to create and modify IndependentAssignedExpression objects.