Administration
General (Tab)
The General (Tab) will be available when one or more of its sub-tabs are enabled.
Branding, Theme, Pages, & Internationalization
To enable the Branding, Theme, (AND) Pages (Sub-Tabs) of the General tab, grant the 'Create' permission for the 'Org' resource with 'brand' as its resource ID.
To enable the Internationalise (Sub-Tab), grant the Update permission for the Org resource with either 'internationalization' (OR) 'internationalization.*' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Branding | Org | Create | brand |
| Theme | |||
| Pages | |||
| Internationalise | Org | Update | internationalization |
| internationalization.* |
Directory (Tab)
The Directory (Tab) will be available when one or more of its sub-tabs are enabled.
Users
To enable the Users (Sub-Tab) of the Directory (tab), grant the 'Read' permission, and to enable the Create New User (Button) in the Users (sub-tab), grant the 'Create' permission for the 'User' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Users (Sub-Tab) | User | Read | * |
| Create New User (Button) | User | Create |
To enable the Edit feature for the users, grant the 'Update' permission, and to enable the Delete feature, grant the 'Delete' permission for the 'User' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Edit | User | Update | * |
| Delete | User | Delete |
To enable the Unlock feature for the users, grant the 'Camunda BPMN Administrator Group' permission for the 'User' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Unlock | User | Camunda BPMN Administrator Group | * |
Groups
To enable the Groups (Sub-Tab) of the Directory (tab), grant the 'Read' permission, and to enable the Create New Group (Button) in the Groups (sub-tab), grant the 'Create' permission for the 'Group' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Group (Sub-Tab) | Group | Read | * |
| Create New Group | Group | Create |
To enable the Edit feature for the group, grant the 'Update' permission, and to enable the Delete feature, grant the 'Delete' permission for the 'Group' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Edit | Group | Update | * |
| Delete | Group | Delete |
Authorization
To enable the Authorization (Sub-Tab) of the Directory (tab), grant the 'Read' permission for the 'Authorization' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Authorization (Sub-Tab) | Authorization | Read | * |
To enable the Create New (Button) for the Authorization (sub-tab), grant the 'Create' permission, to enable the Edit feature, grant the 'Update' permission, and to enable the Delete feature, grant the 'Delete' permission for the 'Authorization' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Create New (Button) | Authorization | Create | * |
| Edit | Authorization | Update | |
| Delete | Authorization | Delete |
User Hierarchy
To enable the User Hierarchy (Sub-Tab) of the Directory (tab), grant the 'All' permission for the 'Filter, Task, User, Group, (AND) Group Membership' resources.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID | ||||
|---|---|---|---|---|---|---|---|
| User Hierarchy (Sub-Tab) | Filter | Task | User | Group | Group Membership | All | * |
All the specified Resource Types are required.
Apps (Tab)
To enable the Apps (Tab), grant the 'All' permission for the 'Filter, Task, User, Group, (AND) Group Membership' resources.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID | ||||
|---|---|---|---|---|---|---|---|
| Apps (Tab) | Filter | Task | User | Group | Group Membership | All | * |
Assisted & Solo
- To enable the Assisted (Section) of the Apps (tab), grant the 'Read' permission for the 'App' resource. (AND) grant the 'Read' (AND) 'Create Instance' permissions for the 'Process Definition' resource.
- To enable the Solo (Section) of the Apps (tab), grant the 'Read' permission for the 'App' (AND) 'Solo Session' resources.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE | PERMISSIONS | RESOURCE ID | |
|---|---|---|---|---|---|---|
| Apps - Assisted | App | Read | Process Definition | Read | Create Instance | * |
| Apps - Solo | App | Read | Solo Session | Read | * | |
Configuration (Common for Assisted & Solo)
- To enable the Config (Sub-Tab) of the Apps (tab), grant the 'Read' permission for the 'App' (AND) 'A8Config' resources.
- To enable the Edit feature for Config, grant the 'Update' permission for the 'A8Config' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|---|---|
| Config (Sub-Tab) | A8Config | Read | App | Read | * |
| Edit | A8Config | Update | * |
Logs
- To enable the Logs (Sub-Tab) for the assisted (section) of the Apps (tab), grant the 'Log Viewer' permission for the 'App' resources. (AND) grant the 'Read' (AND) 'Create Instance' permission for the 'Process Definition' resources.
- To enable the Logs (Sub-Tab) for the solo (section) of the Apps (tab), grant the 'Read' permission for the 'Solo Session' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE | PERMISSIONS | RESOURCE ID | |
|---|---|---|---|---|---|---|
| Logs - Assisted | App | Log Viewer | Process Definition | Read | Create Instance | * |
| Logs - Solo | Solo Session | Read | * | |||
Hosting (Tab)
To enable the Hosting (Tab), grant the 'Read' permission for the 'Org' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Hosting (Tab) | Org | Read | hostedPages |
To enable the Create New (Button), grant the 'Create' permission, to enable the Update feature, grant the 'Update' permission, and to enable the Delete feature, grant the 'Delete' permission for the 'Org' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Create New | Org | Create | hostedPages |
| Update | Org | Update | |
| Delete | Org | Delete |
Migration (Tab)
To enable the Migration (Tab), grant the 'Read' (AND) 'Migrate Solo Session' permission for the 'App' resource.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID | |
|---|---|---|---|---|
| Migration (Tab) | App | Read | Migrate Solo Session | * |
Security (Tab )
The Security (Tab) will be available when one or more of its sub-tabs are enabled.
API Key
To enable the API Key (Sub-Tab), grant the 'Read' permission for the 'Org' resource with either 'api', 'api.*', (OR) 'api.generateAPIKeys.*' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| API Key (Sub-Tab) | Org | Read | api |
| api.* | |||
| api.generateAPIKeys |
- To enable the Create feature, grant the 'Create' permission for the 'Org' resource with either 'api', 'api.*', (OR) 'api.generateAPIKeys.*' as its resource ID.
- To enable the Delete feature, grant the 'Delete' permission for the 'Org' resource with either 'api', 'api.*', (OR) 'api.generateAPIKeys.*' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Create | Org | Create | api |
| api.* | |||
| api.generateAPIKeys | |||
| Delete | Org | Delete | api |
| api.* | |||
| api.generateAPIKeys |
Portal Access
To enable the Portal Access (Sub-Tab), grant the 'Read' permission for the 'Org' resource with 'portalAccess' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Portal Access (Sub-Tab) | Org | Read | portalAccess |
- To enable the Create, grant the 'Create' permission for the 'Org' resource with 'portalAccess' as its resource ID.
- To enable the Update, grant the 'Update' permission, to enable the Delete, grant the 'Delete' permission for the 'Org' resource with 'portalAccess.id' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Create | Org | Create | portalAccess |
| Update | Org | Update | portalAccess.id |
| Delete | Org | Delete |
Audit Logs
To enable the Audit Logs (Sub-Tab), grant the 'Read History' permission for the 'Org' resource with 'audit' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Audit Logs (Sub-Tab) | Org | Read History | audit |
SSO
To enable the SSO (Sub-Tab), grant the 'Read' permission, to enable the Create New SSO, grant the 'Create' permission, for the 'Org' resource with 'sso' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| SSO (Sub-Tab) | Org | Read | sso |
| Create New | Org | Create |
Settings (Tab)
To enable the Settings (Tab), grant the 'Read' permission, to enable the Edit, grant the 'Update' permission, for the 'Org' resource with 'envUpdate' as its resource ID.
| FEATURE | RESOURCE | PERMISSIONS | RESOURCE ID |
|---|---|---|---|
| Settings (Tab) | Org | Read | envUpdate |
| Edit | Org | Update |