Automation Cloud Public Sector release notes
New license activation flow
We are happy to announce that we have streamlined the Enterprise license activation and update flow. This eliminates the need to download a license file and upload it to get things in motion.
You can read more about this in Activating your Enterprise license.
Tenant admin role is GA
First cross-service role
We are thrilled to announce that the Tenant Administrator role in Automation Cloud is now generally available.
This new cross-service role enables greater efficiency in delegating responsibilities, as users, groups, robot accounts, or external applications can manage all resources within a designated tenant.
If you are an Organization Administrator, you can now delegate responsibilities such as role assignment, licensing management, and service provisioning to a Tenant Administrator, decreasing concerns over undesired access to other resources within your organization.
Benefits of the Tenant Administrator role
If you are curious about the benefits of the new Tenant Administrator role, here they are:
-
Increased operational efficiency: This new role decreases the time necessary to set up the admin for tenant-level operations.
-
Reduced workload for Organization Administrators: It reduces the pressure on Organization Administrators.
-
Enhanced security: Greater control over access rights due to fewer users harboring maximum permissions.
We are excited to share that the Tenant Administrator role is just the first tenant-level role we have introduced. Our intention moving forward is to provide the ability to manage cross-service roles from a centralized location.
Known limitations
The Tenant Administrator role is currently affected by the following known limitations, which we are actively working on overcoming:
-
Only the following services support the Tenant Administrator role: Orchestrator (includes Actions, Processes, Integration Service), Data Service, Document Understanding, Task Mining, Test Manager. The rest of the tenant-level services are currently not supported, and users with only the Tenant Administrator role cannot access these services.
-
The Tenant Administrator cannot access organization-level menus from the interface.
-
On the Admin > Tenants > Services screen, the Tenant Administrator can view enabled services, but cannot add or remove services.
-
On the Admin > Tenants > Manage access screen, the Tenant Administrator can view tenants they do not administer. However, if the Tenant Administrator accesses these tenants, they cannot perform any actions.
For more details on the new Tenant Administrator role and how to assign it, refer to Tenant-level roles.
Centralized access management is GA
Check access, our feature for enhanced visibility and control over roles and permissions at both service and tenant levels, is now GA.
The functionality enables Organization Administrators or Tenant Administrators to easily review the roles and permissions for users, groups, robot accounts, or external applications within a tenant or service. Moreover, it is now possible to export all the details on roles and permissions to a CSV file.
To use the feature, simply navigate to Admin > Manage access > Check access. Once there, you can search for any account and review its roles and permissions.
Here are some of the key benefits you can expect from the Check access feature:
-
Quick and efficient resolution of access control issues
-
Streamlined auditing of roles and permissions
-
Boosted overall administrative efficiency
To learn more about this feature, refer to the Checking access.
User and group profiles
Unified profiles for audit and troubleshooting
We are happy to announce that we have introduced a unified view where you can check and manage all the necessary information about your user accounts and local groups. We refer to this view as user and group profiles.
User and group profiles are the solution you need to easily audit and troubleshoot your user or group configurations. Unlike before, you can now perform a wide array of operations from one single location: customize group memberships, handle licenses, monitor access, and update user and group info.
Currently, user and group profiles are available for Organization Admins only.
How to use user and group profiles
To access user and group profiles, navigate to Admin > Accounts & local groups, choose either the User accounts or the Local groups tab, then select the user account or local group you want to manage. A new window opens, allowing you to view or update your user or group configurations.
The following image shows some of the options you have for managing user profiles:
What's next
The new user and group profile experience is enabled by default. However, to facilitate a smooth transition, the previous user and group experience will continue to be available for a limited period, after which we will phase it out. During this period, you have the flexibility to switch between the classic and the new experience as per your comfort.
To switch between the old and new experience, use the toggle button in the upper right side of the Accounts & local groups page, as shown in the following image:
For a comprehensive list of of all the operations you can perform using the new user and group profiles, refer to Managing user and group profiles.
