Appian Community
Site
Search
Sign In/Register
Site
Search
User
DISCUSS
LEARN
SUCCESS
SUPPORT
Documentation
AppMarket
More
Cancel
I'm looking for ...
State
Not Answered
Replies
13 replies
Subscribers
9 subscribers
Views
7290 views
Users
0 members are here
Share
More
Cancel
Related Discussions
Home
»
Discussions
»
General
Deployment of first solution on-premise
sudhak
over 8 years ago
Hello,
Could someone throw some light on best practices for deployment of a first solution on an on-premise installation? I saw the link on Application Deployment Guidelines here:
ppdtpoc.appiancloud.com/.../Application_Deployment_Guidelines.html
but these are only for 16.1 or are applicable for all versions? We run 7.9 on-premise.
Thanks,
Sudha
OriginalPostID-232684
Discussion posts and replies are publicly visible
Parents
0
ryanh
over 8 years ago
One thing we learned a little late (years ago) was to use your system account if possible. When you import new objects they are 'created by' the user that performs the import, since many of the security related functions and logic (a process calling a subprocess) depend on it running under the context of whomever created the object or process this keeps them consistent. Also, if each developer imports to production over time using their accounts not only can this cause issues with security (i.e. developer C has lower/higher rights in the future than when they imported) the code may either not work at all or give too many rights) but the accounts used to import can never be deactivated. If you deactivate the user the applications may loose their security context...so if you buy X licenses in Appian and 10 people over time import to Prod you essentially have used 10 accounts in perpetuity.
We now try and consistently import into our QA & Prod environments using a system account. In Windows, we hold the shift key and right click on Internet Explorer, select 'Run as different user' and then enter the credentials for the system account. Connect to Appian and (login again) import. Then, in theory at least, all objects when created are owned by that 1 account. Updates to existing objects generally don't have to be done this way, but we try to do so as a good practice since your import package likely has at least 1 new item in it. This also benefits because the system account then gets Alerts (at least in our environment) in addition the individuals that you configured in the process models.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
Reply
0
ryanh
over 8 years ago
One thing we learned a little late (years ago) was to use your system account if possible. When you import new objects they are 'created by' the user that performs the import, since many of the security related functions and logic (a process calling a subprocess) depend on it running under the context of whomever created the object or process this keeps them consistent. Also, if each developer imports to production over time using their accounts not only can this cause issues with security (i.e. developer C has lower/higher rights in the future than when they imported) the code may either not work at all or give too many rights) but the accounts used to import can never be deactivated. If you deactivate the user the applications may loose their security context...so if you buy X licenses in Appian and 10 people over time import to Prod you essentially have used 10 accounts in perpetuity.
We now try and consistently import into our QA & Prod environments using a system account. In Windows, we hold the shift key and right click on Internet Explorer, select 'Run as different user' and then enter the credentials for the system account. Connect to Appian and (login again) import. Then, in theory at least, all objects when created are owned by that 1 account. Updates to existing objects generally don't have to be done this way, but we try to do so as a good practice since your import package likely has at least 1 new item in it. This also benefits because the system account then gets Alerts (at least in our environment) in addition the individuals that you configured in the process models.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
Children
No Data