Security role permissions
As part of the Multi-Team Environments feature, a number of changes have been made to existing security role permissions. Some permissions have been added whilst others have been updated or reassigned. Following an upgrade from versions prior to 6.3, all existing users maintain the access rights that their role currently provides.
Due to the increased granularity introduced by Multi-Team Environments, it is recommended that Security role permissions are reviewed to ensure that all users have only the permissions they require.
New permissions
The following security role permissions were introduced in Blue Prism 6.3 to support Multi-Team Environments.
Area |
Permission |
Description |
---|---|---|
Object Studio |
Execute Business Object |
Users can execute objects but cannot open or edit them. |
Manage Business Object Access Rights |
Users can control access rights for object groups. |
|
Execute Business Object as Web Service |
Allows the user account to be used to call associated business objects that are exposed as a web services. |
|
Process Studio
|
Execute Process |
Users can execute processes but cannot open or edit them. |
Execute Process as Web Service |
Allows the user account to be used to call associated processes that are exposed as a web services. |
Removed and updated permissions
The following security role permissions were updated or removed in Blue Prism 6.3 to support Multi-Team Environments.
Area |
Permission |
Details |
---|---|---|
Control Room |
Full Access to Session Management |
The same access rights are granted by the Control Resource permission. |
Read Access to Session Management |
The same access rights are granted by the View Resource permission. |
|
Object Studio |
Compare Business Objects |
Users can compare business objects with the View Object Definitionpermission. |
Create Business Objects |
Renamed Create/Clone Business Object with added permission to clone objects. |
|
Test Business Object |
The same access rights are granted by the Execute Business Object permission. |
|
View Business Object |
Renamed View Business Object Definition. |
|
Process Studio |
Compare Processes |
Users can compare processes with the View Process Definition permission. |
Create Process |
Renamed Create/Clone Process with added permission to clone processes. |
|
Test Process |
The same access rights are granted by the Execute Process permission. |
|
View Process |
Renamed View Process Definition. |
|
Scheduler |
System – Scheduler |
Users with this role, can now only modify the schedule if they also have the Edit Schedule permission. |
New permissions have also been implemented for resources. For further information, see Access rights for resources.