Users need appropriate permissions to log in to and work on the business system. Profiles are designed to manage permissions. A user will not be able to work on the business system unless a profile has been assigned to his account.
The necessary standard profiles for your business system are provided with your Scheer PAS Administration. These standard profiles contain all basic permissions for users of your business system.

Every Scheer PAS Administration includes one administrator's account with platform_admin rights.

The provided standard profiles are:

Standard Admin Profiles

ProfilePermission
analytics_adminUsers with this profile can create and manage templates in Scheer PAS Process Mining. They are also allowed to set a retention time for process data in the Process Mining view of the Scheer PAS  Administration.
pas_admin_userAssign this profile to users who should be able to administrate the system configuration in Scheer PAS Designer.
platform_admin

Standard admin user allowing full access to the functionalities of Scheer PAS Administration.

You can only access the Scheer PAS Administration if profile platform_admin has been assigned at least to one user. Therefore, every Scheer PAS Administration is delivered with one standard administration user.


rpa_adminWhen using Scheer PAS RPA, this profile has to be assigned to the administrator.

Standard User Profiles

ProfilePermission
analytics_user If this profile is assigned, the user can access Scheer PAS Process Mining.
bpaas_design_user This profile allows a user to model processes in Scheer PAS BPaaS.
bpaas_execution_user Users with this profile can execute apps in Scheer PAS BPaaS.
cron_managerAssigning this profile enables users to work with the Scheer PAS Cron Manager.
_dashboard_access_processes

This profile allows to access the complete process data.

  • Customers of Scheer PAS BRIDGE need this profile to use the process data in  Scheer PAS Process Mining.
  • Customers of Scheer PAS BPaaS do not need this profile. But they can use the profile to grant an administrator access to all processes available in the system for use in  Scheer PAS Process Mining.
_dashboard_access_transactions

Users with this profile have access to the complete transaction data.

  • Customers of Scheer PAS BRIDGE need this profile to to use the transaction data in Scheer PAS Process Mining.
  • Customers of Scheer PAS BPaaS do not need this profile.
ml_userScheer PAS customers need this profile to use the Machine Learning adapter.
mobile_autosyncUsers of Scheer PAS Mobile need this profile to use the option Sync instances automatically in the user preferences of the Mobile App.
pas_baseThis profile contains all basic permissions for the Scheer PAS platform.
pas_userCustomers of Scheer PAS Designer need this profile to be able to work in the Designer.
rpa_robot When using Scheer PAS RPA, this profile has to be assigned to the robot user.
rpa_user When using Scheer PAS RPA, this profile has to be assigned to the execution and design users.


Every user needs at least one of those standard profiles to be able to work in the corresponding business system. Administrators can create new profiles by choosing the sidebar menu Add Profile.

Menu "Profiles"

Choosing menu Profiles allows you to create new profiles and to edit existing profiles.

In menu Profiles you can find the following options:

  • Profiles
  • Add Profile

Menu item Profiles displays the list of existing profiles in the content area. The profiles are listed with:

  • Name
  • Display Name
  • Namespace
  • Activated (Yes/No)

Standard profiles do not have a namespace.

Use the filter to limit the content of the list.

If you choose menu item Add Profile, an empty profile data sheet will open:

The Profile Data Sheet

Every profile consists of a profile data sheet covering the following information:

  1. Master Data
  2. Permissions
  3. User
  4. Translations
  5. Meta

Master Data

You can manage the basic data of a profile in the Master Data section:

Only Name is mandatory, Display Name and Namespace are optional.

Profile active

The checkbox above the profile name indicates whether the profile is activated or not. If you create a new profile, default is active.

Name

Name contains the profiles' technical name. The name has to be unique, every name should only be used once in your database.

Display Name

Display name is optional. If you do not want to display the technical name of the profile in your business system, insert a different label for the profile here. This label will be the displayed name in the business system. If the field remains empty, the content of the Name field is used.

Namespace

Namespace is the term for the memory location where the data of this profile is saved. If a profile has no namespace, no data can be saved in this profile. You can neither add a namespace to nor delete it from an existing profile after creation. Therefore, profiles are generally created with namespace.

Users need at least one profile having a namespace to be able to work in your business system.


Use the same identifier for name and namespace of a profile.


Individual write permissions can be granted or denied for profiles with namespace. See page Edit a User for information on how to grant write permissions on profiles.


Permissions

Permissions are used to control the access to URLs, for example the URL of the cockpit or the URLs of specific apps. The permissions window displays the permissions assigned to this profile. Use the Assign button to allocate further permissisons:

  • Assign: By clicking the Assign button, the list of available permissions will open. From the list, choose the permissions you want to assign to this profile.

Generally, it is not necessary to assign a permission to a profile. For example a personal profile ("sandbox") does not need own permissions.

User

In the User window, the profile can be assigned to all users who should be able to see the content saved in this profile:

  • Assign: By clicking the Assign button, the list of available users will open. From the list, choose the users you want to assign to this profile.

Translations

Use window Translations to insert a display name for the role:

Clicking button Edit Translations will show the fields German, English and French:

The names inserted in those fields will be shown in Scheer PAS BPaaS according to the language selected for the BPaaS user interface.

Meta

The Meta section contains a list of the profiles' meta data such as:

  • UUID: The UUID allows to identify the profile.
  • Created at: Contains the creation date of the profile.
  • Modified at: Contains the date of the profiles' last modification.
  • Modified by: Contains another UUID which allows to identify the last editor of the profile.

The content of section Meta is for documentation purposes only: meta data cannot be changed.