Migrating from break inheritance to union of privileges

The union of privileges access model improves access control across all users. It grants users access levels by combining explicit and group-level access. As a result, each time you add or remove a privilege to or from a group, all users who are part of that group become subject to the updated privilege check.

Note: This change impacts the following set of privileges:

• 用户界面配置文件设置（无用户界面访问权限、仅限个人工作区、标准界面）
• 更新策略设置
• 启用用户以运行自动化
• 为此用户创建个人工作区

Permissions already work in the union of privileges model.

Post-migration behavior

Once the migration is complete, check the new behavior as follows:

1. Go to the Manage Access tab.
2. Select the Access Rules tab, then Users, and then select the Assign user button.
   The Assign access rules page is displayed.
3. Search for a user. On the right side of the page, the Summary card displays with the current permissions of the selected user.
4. If the account already has access rules assigned at the tenant level, select the Edit button to modify access rules.
5. Under Configuration, in the Additional roles field, assign additional existing roles to the user, or select New role to create and assign a new role.
   Under Settings, UI Profile has the Standard default option.
6. For Personal automation setup, choose one of the following:
   • 无
   • 启用用户以运行自动化
   • Enable user to run automations + Personal workspace
7. For Client binaries (Robot, Assistant and Studio) auto-update policy, choose one of the following:
   • 无
   • 最新补丁
   • Latest version
   • Specific version
   The following options are available only for users and robot accounts.
8. Under Unattended setup - Unattended robot setup, choose one of the following options:
   • 无
   • Unattended robot using predefined VM credentials
   • Unattended robot using custom Windows credentials
9. For Advanced robot options, configure any of the following options:
   • 日志记录级别
   • 允许开发日志记录
   • 登录到控制台
   • 分辨率宽度
   • 分辨率高度
   • 分辨率深度
   • 字体平滑
   • 自动下载流程
10. Select Update to finish the user configuration.