|
|
About Privilege rulesPurpose
Privileges complement the security and access control features provided by access roles and RuleSet lists, by restricting access to specific rules rather than to entire classes or RuleSet versions.
Use privileges to differentiate the capabilities of different groups of users within your application.
The privilege form defines only the existence (name and Applies To class) of a new privilege. It contains no other information and conveys no capabilities by itself. By referencing privileges in Access of Role to Object rules and in certain rules rule types such as flows, privilege rules can affect which application users can do what.
Where referenced
As users (or other requestors) work with your application, the system compares the privileges they hold with the privileges required. Users who hold any of the privileges listed may use the rule.
- To convey privileges to a requestor, associate the privileges with access roles. Every requestor holds one or more access roles, identified in the access group referenced in the Operator ID data instance.
- To require privileges for use of a rule, reference privileges in that rule within your application. This option is available for selected rule types only. See More about Privileges.
Access
Use the Application Explorer or Rules Explorer to list privilege rules that are available to you.
Category
Privilege rules belong to the Security category. They are instances of the Rule-Access-Privilege rule type.
|
Atlas — Standard privileges |
Security category
Help Home