Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space WPORTAL and version 21.1

Permissions are designed used to control the access to URLs, for example the URL of the cockpit in your business system or the URL of a process appportal, of the BPaaS cockpit or the Designer, or the URLs of specific apps. Permissions are assigned to profiles. Depending on his allocated profiles, a user is authorized to open the cockpitportal, to work with process apps etc.

Info

Multiexcerpt include
SpaceWithExcerptINTERNAL
MultiExcerptNamepermissions_based_on_rbac
DisableCachingtrue
PageWithExcerptINTERNAL:_admin_portal_excerpts

The authorization check of Scheer PAS Administration is based on Role-based Access Control (RBAC).

Menu "Permissions"

Image Added

Menu Permissions allows you to create new permissions and to edit existing ones.

Image Removed

Menu Permissions provides you with two It contains the following menu options:

  • Permissions
  • Add Permission
Existing permissions are listed in the content area if you select Permissions from the sidebar menu. The content is listed as follows

Image Added

In the Permissions menu, a list of all permissions is displayed in the content area.

Multiexcerpt include
SpaceWithExcerptINTERNAL
MultiExcerptNameuse_filter_to_limit
DisableCachingtrue
PageWithExcerptINTERNAL:_admin_portal_excerpts

This list contains the following information:

  • Name
  • Resource
  • Activated (Yes/No)

Image Removed

Tip

Use the filter to limit the content of the list.

Selecting menu item Add Permission opens an

Image Added

Select Add Permission to create a new permission.

An empty permission data sheet

:Image Removed

will open.

The Permission Data Sheet

The data of each permission is saved in a separate permission data sheet with the following sections:

  1. Permissions Master Data Permissions
  2. Permission
  3. Permissions Meta

Master Data

The

Image Added

You can manage the basic data of a permission

is managed

in the Master Data section

:

.

Name is mandatory.

Image Added

Image Removed

Permission active

:

The checkbox indicates

, if

whether the permission

has been

is activated

. Default

or not. If you create a new permission, default is active.

Image Added

Name

:

It is mandatory to insert the identifier for a new permission in the Name field.

Permission

Image Added

A permission grants access to a defined sector of

your business system

the platform.

In the Permission section, you will have to insert the resource of that sector.

Multiexcerpt include
SpaceWithExcerptINTERNAL
MultiExcerptNamepermission_without_json
PageWithExcerptINTERNAL:_admin_portal_excerpts

Image Added

Note

Do not change or create permissions without any knowledge of JSON.

Image Removed

You can choose additional resources by using the drop down list Possible Resource Information.

Available options are:

  • Path
  • Path with Variable

Meta

Image Removed

Image Added

The Meta

In section Meta, you can find the meta data of the permission containing the following information

section contains a list of the permission's meta data such as:

  • UUID: The UUID allows to identify the permission.
  • Created at: Contains the creation date of the permission.
  • Modified at: Contains the date of the permissions' last modification.
  • Modified by Contains another UUID which allows to identify the last editor of the permission.

Image Removed

Info

Multiexcerpt include
SpaceWithExcerptINTERNAL
MultiExcerptNameunchangeable_meta_data
PageWithExcerptINTERNAL:_admin_portal_excerpts

The content of section Meta is for documentation purposes only: meta data cannot be changed.

Standard Permissions

Each Scheer PAS Administration platform is delivered with the standard permissions required for the use of the Scheer PAS modules and components. The following table summarizes the standard permissions.

The table can be searched. To do this, enter your search phrase in the search field:

Table Filter
hideControlstrue
inversefalse
sparkNameSparkline
datepatterndd.mm.yy
globalFiltertrue
id1550838212412_2078951781
sortPermission Name ⇧
worklog5|8|w d h m
isORAND
separatorPoint (.)
order0
Permission NameDescription
activity-service Access to the activities
app_adminScheer PAS Administration Component user management (UI): Access using URL admin
app_fileFile storage without profile check
app_storageFile storage with profile check
app_user_adminScheer PAS Administration Component user management (UI): Access using URL user-admin
For backward compatibility only - default is app_admin
app-userselfUser self service (UI)
bpaas_editorComponent BPaaS: Access to modeling (UI)
bpaas_executionExecution engine for BPaaS apps
bpaas-cockpitComponent BPaaS cockpit (UI): Access using URL bpaas-cockpit
For backward compatibility only - default is cockpit
bpaas-forms-connector-serviceComponent BPaaS integration : Integration of Scheer PAS Mobile (Backend)
cockpitComponent BPaaS cockpit (UI): Access using URL cockpit
customer_serviceAccess to integration (xUML) services and UIs
designer-serviceComponent BPaaS: Editor for mobile forms (Backend)
form-designer-appComponent BPaaS: Editor for mobile forms (UI)

ldap-auth-service

Access to LDAP service
management_consoleAccess to component Administration (UI)
model_editorAccess to component Business Modeler (UI)
model_editor_serviceAccess to component Business Modeler (Backend)
pas_designerAccess to Scheer PAS component Designer (UI)
pas_designer_serviceAccess to Scheer PAS component Designer (Backend)
portal_administrationAccess to the tile "Administration" in the Portal
portal_api_managementAccess to the tile "API Management" in the Portal
portal_base_permission
Access to the Portal
portal_cockpitAccess to the tile "BPaaS" in the Portal
portal_cron_managerAccess to the tile "Cron Manager" in the Portal
portal_designerAccess to the tile "Designer" in the Portal
portal_dev_portalAccess to the tile "API Developer Portal" in the Portal
portal_home_permissionAccess to the homepage of the Portal
portal_integrationAccess to the tile "Integration" in the Portal
portal_keycloakAccess to the tile "Keycloak" in the Portal
portal_kibanaAccess to the tile "Kibana" in the Portal
portal_model_editorAccess to the tile "Business Modeler" in the Portal
portal_process_analyticsAccess to the tile "Process Mining" in the Portal
portal_user_managementAccess to the tile "User Management" in the Portal
sap-restifierAccess to SAP Restifier
service_analytics_api Scheer PAS Component Process Mining (Backend): Reading the analytics database
service_analytics_collectorScheer PAS Component Process Mining (Backend): Collecting data from services

service_analytics_etl

Scheer PAS Component Process Mining (Backend):  Importing data to the analytics database
service_bpaas_backendComponent BPaaS modeling : Modeling (Backend)
service_bpaas_cockpitComponent BPaaS cockpit : Cockpit (Backend)
service_bpaas_robot_connector Component BPaaS integration : Integration of Scheer PAS RPA (Backend)
service_bpaas_robot_connector_continue_instance Scheer PAS Component BPaaS/RPA   (Backend): Continuing an instance
service_bpaas_robot_connector_get_current_user_job_queue_itemsScheer PAS Component BPaaS/RPA   (Backend): Showing robot processes by user
service_bpaas_robot_connector_get_environments Scheer PAS Component BPaaS/RPA   (Backend):   Reading the robot environments
service_bpaas_robot_connector_get_instance Scheer PAS Component BPaaS/RPA   (Backend): Loading an instance
service_bpaas_robot_connector_get_instance_from_queueScheer PAS Component BPaaS/RPA   (Backend): Listing all queued instances
service_bpaas_robot_connector_get_jobs_statsScheer PAS Component BPaaS/RPA (Backend): Getting  Getting list of robot jobs
service_bpaas_robot_connector_get_process_informationScheer PAS Component BPaaS/RPA   (Backend): Listing  Listing robot process information

service_bpaas_robot_connector_get_process_parameter

Scheer PAS Component BPaaS/RPA   (Backend): Analyzing the UIPath process
service_bpaas_robot_connector_get_processes_by_environmentScheer PAS Component BPaaS/RPA   (Backend): Loading robot processes by environment
service_bpaas_robot_connector_get_robot_history Scheer PAS Component BPaaS/RPA (Backend): Loading  Loading robot history
service_bpaas_robot_connector_get_robot_logs Scheer PAS Component BPaaS/RPA   (Backend): Loading robot logs
service_bpaas_robot_connector_get_robot_processes Scheer PAS Component BPaaS/RPA   (Backend):  Loading Loading robot processes
service_bpaas_robot_connector_get_robots Scheer PAS Component BPaaS/RPA (Backend):  Loading Loading robots
service_bpaas_robot_connector_get_sessionsScheer PAS Component BPaaS/RPA (Backend): Listing  Listing robot session information from the orchestrator
service_bpaas_robot_connector_get_sessions_statsScheer PAS Component BPaaS/RPA (Backend): Getting  Getting the total number of robots aggregated by robot state
service_bpaas_robot_connector_has_access_on_profileScheer PAS Component BPaaS/RPA   (Backend): Checking robot authorization for profiles
service_bpaas_robot_connector_save_instance Scheer PAS Component BPaaS/RPA (Backend): Saving  Saving an instance
service_bpaas_robot_connector_set_error_status Scheer PAS Component BPaaS/RPA (Backend): Setting the error status of a robot
service_bpaas_robot_connector_set_status Scheer PAS Component BPaaS/RPA (Backend): Setting the status of a robot
service_bpaas_robot_connector_start_instanceScheer PAS Component BPaaS/RPA (Backend): Starting  Starting an instance
service_bpaas_robot_connector_start_robot Scheer PAS Component BPaaS/RPA   (Backend): Starting  Starting a robot
service_bpaas_robot_connector_start_robot_without_instanceScheer PAS Component BPaaS/RPA (Backend): Starting a robot without requiring a PAS instance
service_cronComponent Cron Manager: Time-controlled event execution (Backend)
service_cron-service_availableServices

Component Cron Manager: Allows access to availableServices event of the service repository

service_cron-service_controlJobComponent Cron Manager: Allows access to controlJob event of cron-service
service_cron-service_getJobsComponent Cron Manager: Allows access to getJobs event of cron-service
service_cron-service_registerJobComponent Cron Manager: Allows access to registerJob event of cron-service
service_cron-service_unregisterJobComponent Cron Manager: Allows access to unregisterJob event of cron-service
service_mailEmail dispatch (Backend)
service_messaging-serviceAccess to messaging service
service_persistence Database access (Backend)
service_service-repository_available_servicesAccess to availableServices API from service repository
service_service-repository_change_service_configAccess to changeServiceConfig API from service repository
service_service-repository_control_serviceAccess to controlService API from service repository
service_service-repository_get_configAccess to getConfig API from service repository
service_service-repository_get_serviceAccess to getService API from service repository
service_service-repository_get_servicesAccess to getServices API from service repository
service_service-repository_get_validation_patternsAccess to getValidationPatterns API from service repository

service_service-repository_get_version

Access to getVersion API from service repository
service_service-repository_update_log_levelAccess to updateLogLevel API from service repository
service_user_*

The access to the user administration is separated in multiple single permissions.
For further information how to use these, please contact the Scheer PAS Support team.

service-reportingMS Office data export (Backend)
service-userselfUser self service (Backend)
transaction_loggerComponent Process Mining: Saving the transaction logs for Scheer PAS Process Mininglog
xuml_library_repositoryAccess to xUML library repository

xuml_library_repository_service

Access to xUML library repository service