Managing access for process apps

Note: To manage permissions for individual process apps, you must have Manage access permission for the particular process apps. When you have created a process app, you will automatically be granted Manage access permissions for the app.

Introduction

In Process Mining you can grant access to process apps for users and groups. Based on the permissions, users who are granted access can edit, view, or delete process apps, or manage access for process apps.

Note: By default, users who belong to a group inherit the access permissions as defined for the group. When editing the permissions for the user, you cannot lower the permissions for the user.

Below is an overview of the different permissions that can be set for users or groups.

Permission	Description
Manage access	The user, or users in the group, can manage access for the app.
View	The user, or users in the group, can view the app.
Edit	The user, or users in the group, can edit the app, upload data, and publish the app.
Delete	The user, or users in the group, can delete the app.

Note: Edit permission includes View permission. When you assign Edit permission to a user or a group of users, the View permission is selected automatically for these user or users. Similarly, when you remove the View permission, the Edit permission is removed automatically.

Editing App Permissions

Follow these steps to edit permissions for a process app.

1. Note: When defining app permissions for users, make sure that the licenses that are needed to perform the role are available.
   Go to the Process Apps tab in the Process Mining portal and locate the app for which you want to define permissions.
2. Click on in the actions column of the process app and select Manage permissions.

   The App permissions page is displayed, showing the app permissions for all groups and users.

   Note: The Manage permission option is only enabled for apps for which you have Manage access permission.
3. Locate the group or user for which you want to edit the permissions and click on .
4. Select the appropriate app permissions for the group or user and click on Save.
   Figure 1. App permissions
   

   

   
   

   Note: When defining app permissions for users, make sure that the licenses that are needed to perform the role are available.
5. Select the fields from the Field access list to grant access to the restricted fields for the user or group you are defining the permissions. See also Setting data restrictions for a process app.
6. Select the record access policies from the Apply record policy list to restrict access to the data defined by the selected policies for the user or group. See also Setting data restrictions for a process app.
7. Click on Save.

Adding permissions for a user or group

Follow these steps to assign roles to a user or group that is not listed.

1. Click on +Add a user or group to open the Assign roles panel.
2. In the Add Users and Groups field start entering the email address of the user, or the name of the group, you want to grant permissions for the process app.
3. If you want to add more users or groups, repeat step 2 to add the users and/or roles.
4. Select the App access permissions you want to grant to the users and/or groups listed in the Add Users and Groups field.
5. Select Save.

New users and/or groups are listed on the App permissions page. For each user or group the assigned permissions are displayed.

Note:

Users who are member of multiple groups, can get assigned multiple filters based on the selected record access policies for the different groups. The combined set of filters will be available for the user.

Revoking permissions for a user or group

When you remove a user or group, the individual user, or the users that are part of the group do not have access to process app anymore.

Follow these steps to remove a user or group.

1. Locate the user or group you want to remove from the User and group access list, and select the Delete icon . A confirmation message is displayed.
   A confirmation message is displayed.
2. Select Confirm to remove the selected user or group.