Object group management

RE: Object group management

Danny Verb — Wed, 26 Jan 2022 18:49:49 GMT

You should focus more on thinking about groups and less on objects. If you make a group called 'Case Management Record Viewers' then you know that you just need to do a!groupMembers() of that group and it will show you show can view the Case Management Record.

RE: Object group management

Marco — Wed, 26 Jan 2022 18:35:37 GMT

I found this a while ago to build something to manage groups with, so I'm not worried about trying to do that:

https://docs.appian.com/suite/help/21.4/recipe-add-remove-move-group-members-browser.html

That summary of user access report sounds like a good idea though. Hopefully it will be enough to satisfy. What function in particular would show access to a site, report or record? The group functions I've seen so far mostly seem to show who is in a group, not what a group is assigned to.

RE: Object group management

Danny Verb — Wed, 26 Jan 2022 17:46:59 GMT

You should control access to objects via groups. There are many apps on the app market and you can even create a site yourself which lets group administrators manage group membership. You don't want end-users in production updating the security of an Object.

If you want a summary of user access, you can create a report and use our group member functions to show who has access to certain sites, reports, or records.

RE: Object group management

Marco — Wed, 26 Jan 2022 17:28:03 GMT

As far as I know, the underlying purpose is that they want to know what each user gets access to because some users aren't getting access to places where they otherwise should, and the security summary has been inadequate in determining that.

RE: Object group management

Stewart Burchell — Wed, 26 Jan 2022 17:10:35 GMT

Just realized that this probably doesn't help you. If I were in your position, I'd challenge the "requirement" (which sounds like it's been cast in the form of a "solution") and try to get to the bottom of what the real requirement/s is/are. What's the actual problem that is trying to be solved here?

RE: Object group management

Stewart Burchell — Wed, 26 Jan 2022 17:06:06 GMT

Ok. I personally would make that a red line, a Gandalf "You Shall Not Pass" moment!

As it happens, AFAIK you can't anyway, since this would require access to the underlying (private) APIs that make Appian Designer work the way it works (I may be wrong, so am happy for others to correct me).

RE: Object group management

Marco — Wed, 26 Jan 2022 17:03:46 GMT

I hear you, and I agree. I don't fully understand why this should exist either. But the task I've been given is to create a separate admin site where admins can manage the group permissions of objects as needed, without going into appian designer.

RE: Object group management

Stewart Burchell — Wed, 26 Jan 2022 16:53:42 GMT

...and Appian Designer - which is an Admin Console - isn't sufficient for your purposes? (I'm not understanding what your use case is, obviously, as it seems that this is a development role and that why would you give someone the ability to mess directly with the code in Production environment, losing all governance and control!)

RE: Object group management

Marco — Wed, 26 Jan 2022 16:51:53 GMT

admin end-users, yes. It would be built into an administration console.

RE: Object group management

Stewart Burchell — Wed, 26 Jan 2022 16:51:18 GMT

You want end-users to manage permissions of code/objects within the Application?

RE: Object group management

Marco — Wed, 26 Jan 2022 16:49:40 GMT

I understand it exists, but we don't want users managing security within appian, instead within their sites.

RE: Object group management

Stewart Burchell — Wed, 26 Jan 2022 16:43:48 GMT

Hi Marco

Um...this already exists. If you open an Application and then navigate to the 'Security Summary' (as illustrated) you can both see and manage the group permissions on every object in your application: