Securing initiating an action in tempo

Hello!

I would like to know which are the most restrictive rights to be given for the users in order to initiate an action in tempo. Granting the viewer one for the process model and the application is mandatory?

  Discussion posts and replies are publicly visible