**Source URL:** https://general.veevavault.dev/quality/mdl/component-types/docatomicsecurity.md

# Docatomicsecurity

**Class: ** `metadata`

Atomic security for documents provides more granular control, based on lifecycle state and role, over who can perform specific lifecycle user actions like changing document state and starting a workflow. For example, the Editor role may be able to start the Review workflow, but not the Expedited Approval workflow.

Learn more about <a href="https://platform.veevavault.help/en/lr/62043" target= "_blank">Atomic Security for Documents in Vault Help</a>.

| Attribute | Metadata | Description |
| --- | --- | --- |
| label | Type: StringMax length: 60 | UI-friendly string in the Vault's base language. |
| active | Type: Boolean | Indicates whether the field is active. |
| document_lifecycle | Type: ComponentRequired | Indicates the lifecycle that atomic security applies to. |
| state | Type: StringRequiredMax length: 1500 | Indicates the lifecycle state that atomic security applies to. |

### Docworkflowactionsecurity {#docworkflowactionsecurity}

| Attribute | Metadata | Description |
| --- | --- | --- |
| label | Type: StringMax length: 60 | UI-friendly string in the Vault's base language. |
| active | Type: Boolean | Indicates whether the field is active. |
| role | Type: StringRequiredMax length: 1500 | Indicates the role override that the permission applies to. |
| type | Type: EnumRequiredAllowed values:hide__vview__vexecute__v | Indicates the permission type. |
| workflow_actions | Type: EnumMulti-valueAllowed values:canceladdparticipantsremovecontentemailparticipantsupdateworkflowduedate | Indicates the active workflow action that the permission applies to. |
| workflow_task_actions | Type: EnumMulti-valueAllowed values:cancelreassignupdateduedate | Indicates the active workflow task action that the permission applies to. |

### Docactionsecurity {#docactionsecurity}

| Attribute | Metadata | Description |
| --- | --- | --- |
| label | Type: StringMax length: 60 | UI-friendly string in the Vault's base language. |
| active | Type: Boolean | Indicates whether the field is active. |
| role | Type: StringRequiredMax length: 1500 | Indicates the role override that the permission applies to. |
| type | Type: EnumRequiredAllowed values:hide__vview__vexecute__v | Indicates the permission type. |
| lifecycle_actions | Type: StringMax length: 1500Multi-value | Indicates the user action that the permission applies to. |

### Supported Operations {#supported-operations}

| Operation | Support |
| --- | --- |
| Create | Yes |
| Recreate | Yes |
| Alter | Yes* |
| Drop | Yes |
| Rename | Yes |
| Describe | Yes |
| Generate Recreate | Yes |
| Queryable | Yes |
**Notes:**

<ul style="padding-left:1.5em;margin-top:0.5rem"><li>**Alter:** <span>MDL Operation may not be supported for some multi-value attributes.</span></li></ul>


---

**Previous:** [Dashboard](/quality/mdl/component-types/dashboard)  
**Next:** [Docfield](/quality/mdl/component-types/docfield)