M301: Grant Administrator Privilege of the Whole System

 

To configure the entire Workflow platform (BPM System) you must have [System Administrator] and [User Manager] Authorization. Furthermore, to register a new Workflow App the User needs the [App Creator] Authorization, and to create new User-Created Channels in Collab Chat [Public Channel Creator] and [Private Channel Creator] Authorization is required for public and private Channels respectively.

1. An Overview of Questetra's System Privileges

a. System Administrator Authorization

Grant System Privileges to any user, and perform system-wide settings

b. User Manager Authorization

Add or Suspend a user account, and Reset a user's password

c. App Creator Authorization

Add new Workflow App

d. Public Channel Creator Authorization

Add a new user-created public channel to Collab Chat

e. Private Channel Creator Authorization

Add a new user-created private channel to Collab Chat

Reference: R3010: List of Authorization of System Privileges
Help page: System Settings – System-wide
Help page: System Settings – Workflow 'App Creator'
Help page: System Settings – Collab Chat

• The administration menu display and control buttons differ according to the privileges you have
• For example, you cannot add a User account with only [System Administrator] Authorization
• Users who have been granted [System Administrator] can use Support Services according to the subscribing Edition.

2. Overview of the relationship between User account and Privilege that Questetra offers

a. Minimize Privilege

Grant only the privilege required by the user for System Administration Business

b. Forbid Account Sharing

Do not issue accounts such as "Administrator" or "root" that can be shared

• There are no universal or comprehensive privileges that enable all System Settings or Business Definition

3. Grant System Privilege to Users

a. Grant to a Specific User

Select from registered User Accounts

b. Grant to Users in an Organizational unit

Select a registered [Organization] or [Role] to grant to all members

• To grant System Privileges you need to have [System Administrator] Authorization
• When granting Privileges to members of a User group unit the privilege will be lost upon leaving the [Organization] or [Role]
• In granting Privileges to an Organizational unit you can limit them to Users With/No Position and with Specific Position
• All Users can see their own System Authorization and App Authorization listed in [Account Settings] menu
• Who has User Manager privilege can see System Authorization and App Authorization granted to Organizations in each details page of [Organization List] of the [System Settings] menu
• Who has User Manager privilege can see System Authorization and App Authorization granted to Roles in each details page of [Role List] of the [System Settings] menu