To allow users to modify a rule in production, define the rule in a production ruleset.
Production rulesets can be listed for applications and for access groups. If an application has production rulesets, you list all of them in the application rule. In an access group, you list the rulesets that are delegated to the access group. Typically, you grant this permission to managers, not to case workers.
As a best practice, do not include any Work- classes (classes for work objects) in production rulesets.
Define the modifiable rule in a regular application ruleset (which is locked), as well as in a higher-version unlocked production ruleset. The rule in the production ruleset takes precedence at runtime since it is a higher-ranked ruleset.
The ruleset concept does not apply to data instances.