Skip to content

Process Access Control List (ACL)

Process ACL controls who can view or administer a process beyond the default system-administrator access. Use this page when process access needs to be delegated or restricted more precisely.

Security Profiles

Security profiles are selected first and provide the baseline access rules for the process.

The existing documentation states that these profiles are defined under the domain administration security-profile area and can include:

  • users
  • positions
  • departments
  • user groups

Security profile selection for process ACL

Additional Permissions

Additional permissions are used when access must be granted to, or restricted from, identities that are not adequately covered by the selected security profile.

These entries can supplement or override the baseline profile.

ACL Entry Fields

Identity

User, position, department, or user group that the rule applies to.

Permissions

Supported documented permission levels:

  • Read: can view process starting points in active mode and access related reports
  • All: treated as process administrator and can access administrative functions and view starting points in test mode

Type

Controls whether the permission is granted or denied:

  • Allow
  • Deny

Begins At

Date when the permission starts to apply.

Expires At

Date when the permission stops applying.