M301: Grant Administrator Privilege of the Whole System

 

To configure the entire Workflow platform (BPM System) you must have [System Administrator] or [User Manager] Authorization. Furthermore, to register a new Business Process Definition (App) the User needs the [App Creator] Authorization.

1. An Overview of Questetra's System Privileges

a. System Administrator Authorization

Grant System Privileges to any user, and perform system-wide settings

b. User Manager Authorization

Add or Suspend a user account, and Reset a user's password

c. App Creator Authorization

Add new Business Process Definition (App)

R3010: List of Authorization of System Privileges
System Settings – System Authorization

• The administration menu display and control buttons differ according to the privileges you have
• For example, you cannot add a User account with only [System Administrator] Authorization
• Users who have been granted [System Administrator] can use Support Services according to the subscribing Edition.

2. Overview of the relationship between User account and Privilege that Questetra offers

a. Minimize Privilege

Grant only the privilege required by the user for System Administration Business

b. Forbid Account Sharing

Do not issue accounts such as "Administrator" or "root" that can be shared

• There are no universal or comprehensive privileges that enable all System Settings or Business Definition

3. Grant System Privilege to Users

a. Grant to a Specific User

Select from registered User Accounts

b. Grant to Users in an Organizational unit

Select a registered [Organization] or [Role] to grant to all members

• To grant System Privileges you need to have [System Administrator] Authorization
• When granting Privileges to members of a User group unit the privilege will be lost upon leaving the [Organization] or [Role]
• In granting Privileges to an Organizational unit you can limit them to Users With/No Position and with Specific Position
• All Users can see their own System Authorization and App Authorization listed in [Account Settings] menu
• Who has User Manager privilege can see System Authorization and App Authorization granted to Organizations in each details page of [Organization List] of the [System Settings] menu
• Who has User Manager privilege can see System Authorization and App Authorization granted to Roles in each details page of [Role List] of the [System Settings] menu