Assigning a role with schema privileges set to production level 5 enables administrators to import archives containing schema changes into a production system. For example, Pega Cloud customers can have their administrator import archives that include schema changes without requiring Pegasystems Cloud Operations to perform this step.

To enable the system to import an archive with schema changes into production, edit the following role privileges:

• SchemaImport - Enables you to make schema changes when importing an archive.
• ViewAndOptimizeSchema - Controls access to the Optimize Schema and Modify Schema landing pages.

The default system administrator role is PegaRules:SysAdm4; the default setting for these privileges is production level 2. As a best practice, create an application-specific role that contains the updated privileges and then assign that role to administrator access groups.

For more information about production levels, see Completing the Production tab in the help.

Editing the system administrator privileges

Follow these steps to update the privileges for your application-specific system administrator role:

1. Follow these steps to create a new role:
   1. Click Create > Security > Access Role Name.
   2. In the Label field, enter YourAppNameSchemaAdmin.
   3. In the Context section, select your application, ruleset, and version.
   4. Click Create and open.
   5. Click Save.
   6. Click the plus sign to add an Access Class.
   7. In the Class field, enter @baseclass.
   8. Click Save.
2. Edit the new role:
   1. Click @baseclass.
   2. In the Privileges section, click the plus sign twice to create two new lines.
   3. Add the ViewAndOptimizeSchema privilege.
      In the Name column, enter ViewAndOptimizeSchema.
      In the Level column, enter 5.
   4. Add the SchemaImport privilege.
      In the Name column, enter SchemaImport.
      In the Level column, enter 5.
   5. Click Submit.
   6. Click Save.
   7. Close the role.
3. Add the new role to the list of available roles for your system administrator access group by doing the following steps:
   1. Click Records > Security > Access Group and select the administrator access group for your application.
   2. In the Available roles section, verify that the updated role appears.
   3. If the updated role does not appear, click Add role and enter YourAppNameSchemaAdmin.
   4. Click Save.