User roles and access permissions

Everybody working on an excavation on site or in post-excavation performs one or more roles. Each role represents the knowledge and skills that an individual is expected to have in order to perform the role and the responsibilities that will be assigned to them while performing the role. Around the internet, lots has been posted about roles and their associated archaeological knowledge, skills and responsibilities.

Overview of the roles

The following table lists the roles, the contribution people performing those roles make to an excavation and the equipment and IT applications they are expected to use.

Roles for archaeologists

RoleResponsibility for excavationEquipment and IT applications used by this role
Project leaderHas complete control of a site and work on the siteEverything on and off site
SurveyorGeo-positions and record grids for site, geophysics and excavation areasGlobal Positioning System (GPS), Total Station, using shared filestore and QGIS as an editor and a browser
Geophysics specialistCollects and interprets geophysics dataEarth resistance meter, Gradiometer, Snuffler, shared filestore and QGIS as an editor and a browser
Site photographerTaking pictures of the site for reports and publicityCamera equipment to take vertical pictures on site and find images. Software to combine camera pictures,
Excavation area leaderHas control of an excavation area and records data about that areaExcavation tools (trowels, mattocks, markers, etc), a Dumpy level, context recording sheets, kit for drawing plans and sections, using camera to take pictures of contexts and sections, drawing stratigraphic matrices using DRAW IO
DiggerDigs trenches and records dataExcavation tools (trowels, mattocks, markers, etc), context recording sheets, gradually using the tools used by the Excavation area leader
Stratigraphic analysis recorderRecords contexts, matrices using DrawIO plans using QGIS as a browserRecording in contexts, matrices, plans and sections in the filestore and database, drawing matrices
QGIS specialistRecords plans of contexts, small finds and sectionsInputs plan records using QGIS as a plan editor. Producing QGIS figures for reports
Finds specialistIdentifies and advises on finds and findgroups for one or more material types.a third party offering advice and guidance
Finds recorderShadows a finds specialist, defines finds spreadsheets and tables, records finds and find groups, write finds reportCreates finds spreadsheets. Works with IT team to create specialist finds tables and queries on tables. Adds finds data to spreadsheets and tables. Uses MS office to write finds reports
Site interpreterResponsible for the interpretation of a site and writing up reportsAnchurus II interpretation combining stratigraphic analysis and finds from this site with similar evidence from adjacent sites
Site Data specialistManaging the site data, inputting find specialist table definitions,
writing SQL queries
Anchurus II

Information Technology roles

RoleResponsibilityTools they use
System administratorHas complete control of a systemAnchurus II
System developerWrites and tests Anchurus codeCoding and testing systems
System testerTest Anchurus IITest systems
System supportWorks with Site Data specialists

Shared drive access permissions

The Site Shared Drive is normally owned by the Project leader who then gives access to folders in the shared drive to people working in the roles summarised above.

Anchurus II uses a Google Drive because the Berkshire Archaeological Society, who initiated work on Anchurus, was a Not for Profit Organisation and hence was granted free use of a Google Drive.

Using Google Drive, each site has a shared drive. The project leader can download and access the Anchurus II deliverable which creates the file store structure shown below and can then select any folder or file in the structure and grant a person working on the project access to it. The access permissions are:

  • Viewer: Can only view the file or folder
  • Commenter: Can view and add comments to the file or files in a folder
  • Editor: Can view, comment, and make edits to the content of the file or files in a folder
  • Owner: Has all editor permissions and can also delete the files or folder in the shared drive

The project leader has Owner permissions and can grant these permissions to others.

The shared filestore has been designed so that the management information is in folders SC01, SC02 and SC04 and hence can be tightly controlled, and yet they can give everybody working on the project Viewer access to folder SC03 Site Archaeology and everything it contains.

The table below shows the recommended permissions assigned to the roles outlined above.

The Site shared filestore as defined in the Anchurus II deliverable is described in more detail on the following page: A Shared Filestore.

The Anchurus II database

The database management system used to support Anchurus is MariaDB. MariaDB is an open source system and available as free software.

The figure below shows the tables held in the database supported by Anchurus II release 2;

The Tables shown in blue are the tables used to record the archaeology. Those shown in red are tables used to administer the finds boxes and the system. The boxes shown in white are the find specialist tables.

These tables have been designed so an Anchurus II system can record data from many different archaeological fieldwork sites.

Anchurus II database access permissions

The database management system will allow us to use the user roles defined above to control access to individual tables or even columns of tables. However, this is over complicated for what we need at this point in time so Anchurus II supports a simpler system where users and their roles are registered at site level.

The actions a user can perform on the database tables are:

  • Read: all the columns in a table
  • Select: a row in the table
  • Insert: create a new row in a table
  • Update: update a row in a table
  • Write queries: these are read only queries written in SQL

For more details on these basic operations go the MariaDB website: read the documentation and watch the tutorials.

The database user roles are:

  • Viewer: users assigned this role can read the site data from all the archaeological tables in the database
  • Editor: users assigned this role can add new rows to the archaeological tables for a site and edit existing rows in these tables
  • Manager: users assigned this role can bulk load data into the archaeological tables, delete rows from the archaeological tables and have full access to the administration tables.
  • Administrator: who has complete control of and access to all the tables in the database.

The table below shows the recommended privileges that site managers should assign people performing roles on their site.

RolePrivilegesRecommended
Anchurus II roles
Project leaderSite archaeology and admin tables: read, select, insert, update and writing queriesManager
SurveyorSite archaeology tables: readViewer
Geophysics specialistSite archaeology tables read, and generate queries, Anomaly table: select, insert, updateEditor
Trench leaderSite archaeological tables: read, generate queries
Context table: select, insert, update
Editor
DiggerSite archaeological tables: readViewer
QGIS specialistSite archaeological tables: readViewer
Finds specialistSite archaeological tables and
specialist finds tables: read, queries
Viewer
Finds recorderSite archaeological tables: read, queries
Find and Find specialist tables: select, insert, update
Editor
Site interpreterSite archaeological tables: select, insert, update, queriesEditor
Site Data specialistSite archaeological tables: select, insert, update queriesManager
System administratorAll tables select, insert, update, queriesAdministrator
System developerAll in test systems onlyManager
System testerAll in test systems onlyManager
SupportGiven permission to access site archaeological tables by the project leader or Site data specialistManager

Author: Andrew Hutt January 2026