To configure the entire Workflow platform (BPM System) you must have [System Administrator] and [User Manager] Authorization. Furthermore, to register a new Workflow App the User needs the [App Creator] Authorization, and to create new User-Created Channels in Collab Chat [Public Channel Creator] and [Private Channel Creator] Authorization is required for public and private Channels respectively.
1. An Overview of Questetra's System Privileges
- a. System Administrator Authorization
Grant System Privileges to any user, and perform system-wide settings
- b. User Manager Authorization
Add or Suspend a user account, and Reset a user's password
- c. App Creator Authorization
Add new Workflow App
- d. Public Channel Creator Authorization
Add a new user-created public channel to Collab Chat
- e. Private Channel Creator Authorization
Add a new user-created private channel to Collab Chat
Reference: R3010: List of Authorization of System Privileges
Help page: System Settings – System-wide
Help page: System Settings – Workflow 'App Creator'
Help page: System Settings – Collab Chat
- The administration menu display and control buttons differ according to the privileges you have
- For example, you cannot add a User account with only [System Administrator] Authorization
- Users who have been granted [System Administrator] can use Support Services according to the subscribing Edition.
2. Overview of the relationship between User account and Privilege that Questetra offers
- a. Minimize Privilege
Grant only the privilege required by the user for System Administration Business
- b. Forbid Account Sharing
Do not issue accounts such as "Administrator" or "root" that can be shared
- There are no universal or comprehensive privileges that enable all System Settings or Business Definition
3. Grant System Privilege to Users
- a. Grant to a Specific User
Select from registered User Accounts
- b. Grant to Users in an Organizational unit
Select a registered [Organization] or [Role] to grant to all members
- To grant System Privileges you need to have [System Administrator] Authorization
- When granting Privileges to members of a User group unit the privilege will be lost upon leaving the [Organization] or [Role]
- In granting Privileges to an Organizational unit you can limit them to Users With/No Position and with Specific Position
- All Users can see their own System Authorization and App Authorization listed in [Account Settings] menu
- Who has User Manager privilege can see System Authorization and App Authorization granted to Organizations in each details page of [Organization List] of the [System Settings] menu
- Who has User Manager privilege can see System Authorization and App Authorization granted to Roles in each details page of [Role List] of the [System Settings] menu