Security permissions for process definitions

Learn about security permissions for process definitions

Last published at: April 30th, 2024

This function grants/revokes View, Design, and Remove permissions for a process definition. 

By default, an average user can only view the process definitions they have created or have permission to view. The regular user can only view process definitions developed by other users if other users give permission. The regular user can View, Design, and Remove the process definition based on the “Permissions” assigned by the admin or the user who created the definition.

On the Process Definition page, select the process from the table and click on the Security - Permissions menu option.

 

The new page displays Manage Permissions. Permissions can be granted to an individual user or an application group.  

 

Search and add the desired user(s) for whom permission must be set for the selected definition. To initiate the search, type the user's name's first three char(s). Select the user from the list and click the Add button to include it.  

 

Select the checkbox to grant permission to View, Design, and Remove. Click on Save Permissions to confirm. An alert notification is displayed in the top right-end corner.  Repeat this activity to add more users to this permissions list.  

 

Search and add the application role to grant permissions for a group of users. To initiate the search, type the application role name's first three char(s). Select the role from the list and click the Add button to include it.  

 

Select the checkbox to grant permission to View, Design, and Remove. Click on Save Permissions to confirm. An alert notification is displayed in the top right-end corner.  Repeat this activity to add more roles to this permissions list.  

 

On the Manage Permissions page, select the user or application role from the list. Click on the Remove Permissions button. A popup alert is displayed for confirmation. Click OK to confirm the action. An alert notification message is displayed in the top right-end corner.  

 

Lock and Unlock process definitions.

By default, an average user can only view the process definitions they have created or have permission to view. The regular user can only view process definitions developed by other users if other users give permission. The regular user can View, Design, and Remove the process definition based on the “Permissions” assigned by the admin or the user who created the definition.

The definition is locked to the user creating/modifying the process. There is no concept of collaboratively building workflows; the definition is unlocked only after the changes are saved and closed. 

The locked definition can be unlocked by another user with View / Design / Remove permissions on this definition. This second user can now lock the definition for further modification. The first user cannot save the changes now that the definition is no longer locked to self. The application shall alert the first user on the lock status and the username for making the changes. This safety check thus prevents the contents from being overwritten by concurrent usage.