Im confused by Process Model security for Initiator. From Appian Docs below, Ini

greggl over 8 years ago

Im confused by Process Model security for Initiator. From Appian Docs below, Initiator can start the process model but so can Viewers. I have a set of users I want to View the process model but not be an Initiator of the process via actions. How can this be achieved if Viewers also have Initiator rights?

forum.appian.com/.../Configuring_Process_Model_Security.html
When viewing the Process Model Security dialog box, configure the process model security by selecting the desired security setting for the users or groups listed. The rights for each security setting are listed in the table below.

When viewing the Process Model Security dialog box, configure the process model security by selecting the desired security setting for the users or groups listed. The rights for each security setting are listed in the table below.

Actions Process Administrator Editor Manager Viewer Initiator
Start the Process Model X X X ...

Discussion posts and replies are publicly visible

Parents

0 sikhivahans over 8 years ago

@greggl True, unfortunately there isn't such possibility AFAIK.

But I guess still there are few ways as follows for accomplishing your requirement:

1. Implementation of Modify Process Security Smart Service and adding the roles dynamically after the initiation. This isn't a tedious task, as it's just one node configuration.

2. Add the desired groups (People who are and aren't able to initiate) as 'Viewers' to the security role map of Process Model. But wrap the process models in the 'Application' object and expose the 'Application' only to the groups who should be able to initiate the 'Action'. This way, there wouldn't be a need to implement dynamic security using 'Modify Process Security Smart Service' and also the 'Application' takes care of exposing the 'Actions' to right set of groups, thereby providing the initiation capability to the desired groups.

In either of the ways, you should be doing some background work in order to expose the initiation of 'Action' only to few groups but to expose the instance's data to other groups.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 sikhivahans over 8 years ago

@greggl True, unfortunately there isn't such possibility AFAIK.

But I guess still there are few ways as follows for accomplishing your requirement:

1. Implementation of Modify Process Security Smart Service and adding the roles dynamically after the initiation. This isn't a tedious task, as it's just one node configuration.

2. Add the desired groups (People who are and aren't able to initiate) as 'Viewers' to the security role map of Process Model. But wrap the process models in the 'Application' object and expose the 'Application' only to the groups who should be able to initiate the 'Action'. This way, there wouldn't be a need to implement dynamic security using 'Modify Process Security Smart Service' and also the 'Application' takes care of exposing the 'Actions' to right set of groups, thereby providing the initiation capability to the desired groups.

In either of the ways, you should be doing some background work in order to expose the initiation of 'Action' only to few groups but to expose the instance's data to other groups.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data