Process model viewer groups

Thank you all for your response. Client engineering team doesn't want Prod support team to go through the design objects. They wanted to reduce unauthorized access, avoid misuse of API endpoints, business rules.

I have a suggestion which basically involves securing the objects of application tightly so that support team can access just process model and nothing else. It goes like this - 

1. Ensure all Support Team members are assigned the Basic User role in the Admin Console.
2. Add users to the "Designers" system group to grant access to Appian Designer.
3. Create a dedicated Application that exclusively contains the process models used within the application.
4. Create a group specifically for Support Team members.
5. Assign Viewer permissions to the Support Team group for all process models and the application.
6. Apply appropriate security configurations to all other applications/environment objects by mapping them to relevant groups so that none of the object is orphan/without any security configured.

With the above the support team member will see just one application in environment which will have process models. Apart from process models this group won't have access to any other object. The team would be able to check monitoring instances. But cannot edit them. They will not be able to see CDT/record type based process variables data as well in the instances as they won't have access to underling record or cdt. 

I have a suggestion which basically involves securing the objects of application tightly so that support team can access just process model and nothing else. It goes like this - 

1. Ensure all Support Team members are assigned the Basic User role in the Admin Console.
2. Add users to the "Designers" system group to grant access to Appian Designer.
3. Create a dedicated Application that exclusively contains the process models used within the application.
4. Create a group specifically for Support Team members.
5. Assign Viewer permissions to the Support Team group for all process models and the application.
6. Apply appropriate security configurations to all other applications/environment objects by mapping them to relevant groups so that none of the object is orphan/without any security configured.

With the above the support team member will see just one application in environment which will have process models. Apart from process models this group won't have access to any other object. The team would be able to check monitoring instances. But cannot edit them. They will not be able to see CDT/record type based process variables data as well in the instances as they won't have access to underling record or cdt. 

Interesting. let me try this out.