# Vault Owner Security Profile & Permission Set

The _Vault Owner_ [standard security profile](/en/lr/45887/) is included by default in all Vaults. This profile is assigned the _All_ permissions for _Configuration_, _Vault Actions_, _Objects_, and _Tabs_, and is automatically granted any new permissions.

## Included Permission Sets

The _Vault Owner_ standard security profile includes the [_Vault Owner Actions_](/en/lr/22824/#vault-owner-actions), _Business Administrator Actions_, and _System Administrator Actions_ [standard permission sets](/en/lr/45887/).

## Standard Vault Owners Actions & Functionality

Standard _Vault Owners_ are allowed to perform the following actions and functionality not available to other security profiles, regardless of permissions assigned in the permission set:

* Override all document security, except for [field dependency](/en/lr/2617/) behavior, including:
  * Create, update, and delete [document relationship types](/en/lr/21330/)
  * Delete and edit [document comments and replies](/en/lr/5415/)
  * Download document source files


<div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: Assigning the <a href="/en/lr/22824/#all-permissions"><em>All Document Actions</em></a> permission to a custom permission set does not grant the same level of override granted to <em>Vault Owners</em>. These users still need the necessary role-based permissions.</p>
    </div>
  </div>
</div>



* Edit all [system provided groups](/en/lr/3200/#system-provided-groups) except for the _Vault Owners_ system provided group
* Manage users with the standard _Vault Owners_ security profile:
  * [Assign users](/en/lr/23647/#assign) to the standard _Vault Owner_ security profile
  * [Edit users](/en/lr/23647/#assign) assigned to the standard _Vault Owner_ security profile
  * [Grant Veeva Support access](/en/lr/1993/) as for standard _Vault Owner_
  * [Reset passwords](/en/lr/953/#ResettingAUserPassword) for users with a standard _Vault Owner_ security profile
* Assign jobs to [run as other users](/en/lr/22897/)
* Cancel [Vault File Manager](/en/lr/44346/) upload jobs they created. _Vault Owners_ cannot cancel upload jobs created by other users
* Connect to the  <a class="external-link " href="https://developer.veevavault.com/sdk/#tutorial-using-the-vault-java-sdk-debugger" target="_blank" rel="noopener">Vault Java SDK Debugger<i class="fa fa-external-link" aria-hidden="true"></i></a>
* Perform updates to [Legacy User accounts](/en/lr/46534/#synchronize-legacy-user-and-user-object-records).