Relationship Between Folders and Process Design Permissions¶
This page documents how folder permissions and process-design permissions combine to determine what a user can do with a process. It is intentionally preserved as a dense reference because the access matrix is operationally important.
Use it when you need to answer questions such as:
- who can start a process
- who can access process design
- who can see process statistics or dashboards
- who can create, upgrade, or delete process versions
- who can edit or delete the containing folder
Quick Interpretation¶
Before reading the full matrix, these rules explain most outcomes:
- The more restrictive result usually wins for design-time actions such as changing permissions, upgrading versions, or deleting content.
- Folder permission controls whether the user can work with the containing folder at all.
- Process-design permission controls whether the user can open or change the process definition itself.
- Statistics and dashboards often remain visible even when process-design access is not granted.
Allbehaves like administrator-level access for that layer, whileReadandExecuteare much narrower.
If you need to change access on one specific process, start with Process Access Control List. Use this page when that ACL result still seems surprising because folder permission and process permission are interacting.
How to Read the Matrix¶
Each table combines:
- a Folders permission level
- a Process Design permission level
- the resulting capabilities
The capability list records whether the user can:
- initiate the process
- access process design
- change permission lists
- access process-specific statistics
- access dashboards
- create or upgrade process designs
- edit or delete the containing folder
- delete the process design
Permission Matrix¶
The following tables are the detailed reference.
| Folders | Process Design | Result |
|---|---|---|
| All | All | * Can initiate a process. Can access process design. Can access process-specific statistics. Can access process-related dashboards, including their own data and, if designed, data for others. Can create a process design. Can edit folders containing the process. Can change folder name and folder permissions. Can delete the folder. Can delete the process design itself. |
| All | Write | * Can initiate a process. Can access process design. Can edit the permission list of a folder. Can edit the permission list of a process design. Cannot delete the folder. Can create a new folder. Can access process-specific statistics. Can access process-related dashboards, including their own data and, if designed, data for others. Can create a process design. Cannot delete a process version. Cannot upgrade a process version. Can edit folders containing the process. Can change folder name and folder permissions. Can delete the folder. Can delete the process design itself. |
| All | Execute | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| All | Read | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Folders | Process Design | Result |
|---|---|---|
| Write | All | * Can initiate a process. Can access process design. Can edit the permission list of a folder. Can edit the permission list of a process design. Cannot delete the folder. Can create a new folder. Can access process-specific statistics. Can access process-related dashboards, including their own data and, if designed, data for others. Can create a process design. Can delete a process version. Can upgrade a process version. Can edit folders containing the process. Can change folder name and folder permissions. Cannot delete the folder. Can delete the process design itself. |
| Write | Write | * Can initiate a process. Can access process design. Can edit the permission list of a folder. Can edit the permission list of a process design. Cannot delete the folder. Can create a new folder. Can access process-specific statistics. Can access process-related dashboards, including their own data and, if designed, data for others. Can create a process design. Can delete a process version. Can upgrade a process version. Can edit folders containing the process. Can change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Write | Execute | * Can initiate a process. Cannot access process design. Cannot delete folders. Can access process-specific statistics. Can access process-related dashboards, including their own data and, if designed, data for others. Cannot create new versions of processes. Can create a process design. Cannot edit folders containing the process. Cannot change folder name and folder permissions. * Cannot delete the folder or the process design itself. |
| Write | Read | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Folders | Process Design | Result |
|---|---|---|
| Execute | All | * Can initiate a process. Can access process design. Can access process-specific statistics. Can access process-related dashboards, including their own data and, if designed, data for others. Can create a process design. Can edit folders containing the process. Can change folder name and folder permissions. * Can delete the folder and the process design itself. |
| Execute | Write | * Cannot initiate a process. Cannot access process design. Can access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot edit folders containing the process. Cannot change folder name and folder permissions. * Cannot delete the folder or the process design itself. |
| Execute | Execute | * Cannot initiate a process. Cannot access process design. Can access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot edit folders containing the process. Cannot change folder name and folder permissions. * Cannot delete the folder or the process design itself. |
| Execute | Read | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Can access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Folders | Process Design | Result |
|---|---|---|
| Read | All | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards, including their own data and general process information if designed. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Read | Write | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards, including their own data and general process information if designed. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Read | Execute | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards, including their own data and general process information if designed. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |
| Read | Read | * Can initiate a process. Cannot access process design. Cannot edit the permission list of a folder. Cannot edit the permission list of a process design. Cannot delete the folder. Cannot create a new folder. Cannot access process-specific statistics. Can access process-related dashboards pertaining to themselves only. Cannot create a process design. Cannot delete a process version. Cannot upgrade a process version. Cannot edit folders containing the process. Cannot change folder name and folder permissions. Cannot delete the folder. Cannot delete the process design itself. |