Access Control

Orchestrator modern folders help you containerize actions, processes, and users.

By default, actions are generated in the same folder as the corresponding processes. Only the users in that folder can access the actions based on their roles and permissions, as follows:

• Multiple users see all unassigned actions in the specified folder.

• An action user sees only their assigned actions (in the Pending tab).

  Note: As soon as an action gets assigned, it transitions from the Unassigned tab to the Pending tab of the assigned user.
• An action admin sees all pending actions and has the option to reassign them to other users, if needed.

Redirecting actions to specific folders

To control which users can access specific Actions, through the use of folders:

1. Create a folder.
2. Make sure the users or groups that need to access the Actions are assigned to the folder.
3. Inside your workflow in Studio, use the Orchestrator Folder Path property to redirect the Action creation or assignment to the desired folder.

Note: Find the Orchestrator Folder Path property in activities such as Create Form Task and Assign Task.

Redirecting an Action assignment (from the Assign Task activity) or creation (from the Create Form Task activity) to a different folder allows you to control who can access the Actions, as you can add or remove specific users from the folder.

Tip: For a more granular user restriction, assign them specific roles and permissions inside the desired folder.