M302: Assign a Privileged Administrator for Each Business Process Definition

 

To run a Business Process Definition (App) as a Workflow you need [App Administrator] Authorization, which is an Admin-Privilege that is configured on each App. Other App privileges include [Process Manager] Authorization and [Data Viewer] Authorization.

1. Overview of Local Privilege on Each App

a. App Administrator Authorization

Users with this Admin-privilege can Create and Modify Apps, Grant Local Privileges to Users and Release Workflows

b. Process Manager Authorization

Users with this Admin-privilege can Delete, Abort and Re-assign Issues

c. Data Viewer Authorization

Users with this Admin-privilege can Browse or Search specific data (M116, M117)

Reference: R3020: Privilege List of App Authorization
Help page: System Settings – Workflow 'App Authorization App List'

• [App Administrator] Authorization is usually granted to the person responsible for improving the Business Process (Process owner)
• [Process Manager] Authorization is usually granted to the operations supervisor of the Business Processes
• The Issues on which you have "Process Manager" authorization, you can browse its details page on [Administrator Mode]
  • In [Administrator Mode], you can check the processing records of auto-steps and the Process logs.
• [Data Viewer] Authorization is usually granted to department staff or to the members of Audit team
• A User with both [Process Manager] and [Data Viewer] Authorization can Edit the data of Issues in progress
• Besides these, there is a restricted privilege called [Data Viewer (only Progress Information)]
  • This is a subset privilege of [Data Viewer] (there is no need to register both)
  • In [Data Viewer (only Progress Information)], you cannot view the data stored in the Data Items
• Even without [Data Viewer] Authorization Users can Browse and Search data which is in the Issues that they have operated (M116)
• Process Start User can delete a Process (such as those that are started accidentally) as long as it is not being processed by another user

2. Grant Local Privileges

a. Grant to one User

Select from registered User Accounts

b. Grant to Users in an Organizational unit

Select a registered [Organization] or [Role] to grant Privileges to all members

• To Grant App Local privileges requires [App Administrator] Authorization
• Click [Edit Authorization] on App Detail screen
• When granting Privileges to members of an Organizational unit the privilege will be lost upon leaving the [Organization] or [Role]
• In granting Privileges to an Organizational unit you can limit them to Users With/No Position and with Specific Position
• All Users can see their own System Authorization and App Authorization listed in [Account Settings] menu
• Users who have User Manager privilege can see System Authorization and App Authorization granted to Organizations in the [Organization List] details page in the [System Settings] menu
• Users who have User Manager privilege can see System Authorization and App Authorization granted to Roles in the [Role List] details page in the [System Settings] menu
• App Authorization cannot be granted to a User who does not belong to any Organization
• If a User granted Privileges no longer belongs to any Organization, the Privileges will be suspended
  • They will be restored if the User belongs to either of the Organizations again

---

Z. More Info:

• Developer Blog: Who Can View Business Data of the Issue, and Who Can't?
• FAQ: Can I Modify Data Later on for Mis-Input, etc.?