Skip to main content

         This documentation site is for previous versions. Visit our new documentation site for current releases.      

Configuring your operators and security model

Updated on February 16, 2021

During the execution of the New Application wizard, the system creates a copy of the access groups that represent the different personas involved in the application. If you created an application of named MyApp, you must have the following access groups in the system:

Access group

Access groupTypeDescription
MyApp:CLMFSCIBSysAdminAdministrationGeneral administrator
MyApp:CLMFSCIB_AppSetupAdministrationUser with access to App Studio
MyApp:CLMFSCIB_SS_UserEnd userSales Support User
MyApp:CLMFSCIB_SS_ManagerEnd userSales Support Manager
MyApp:CLMFSCIB_RM_UserEnd userRelationship Managers User
MyApp:CLMFSCIB_RM_ManagerEnd userRelationship Managers Manager
MyApp:CLMFSCIB_KYC_UserEnd userKYC User
MyApp:CLMFSCIB_KYC_ManagerEnd userKYC Manager
MyApp:CLMFSCIB_BO_UserEnd userBack Office User
MyApp:CLMFSCIB_BO_ManagerEnd userBack Office Manager
MyApp:CLMFSCIB_ITAdminAdministrationIT Administrator

The system configures all these access groups by default to use new roles that inherit from the out of the box ones. It gives you the ability to create your own privileges and security configuration against out-of-the-box resources. In addition to the general configuration applicable to any Pega application (for example, name, email, location settings, and others), there are two pieces of configuration that are essential to get your operators ready:

Access group
The operator must be pointing to one of the access groups, see the list of access group in a table above. Pega supports the configuration of multiple access groups per operator, but the CLM portals are not prepared to switch between access groups, then your operator can access only to the one marked by default.

For example, if we want our operator to act as the manager of a group of Relationship Managers, it should use the access group MyApp:CLMFSCIB_RM_Manager.

Organizational unit and work group
Associate your operators with the operating structure, see . Assign the operator to one of the organizational units and make the work group point to one of the departments created.

For example, if the operator must be responsible for the Relationship Managers at the Frankfurt booking entity, allocate it to the UPFS-GM-EMEA-DE-UPFSFR organizational unit and to the UPFS_GM_EMEA_DE_RelMgmt work group.

Administer your operators, either to create new or to edit existing ones.

In the header of Dev Studio, click ConfigureOrg & SecurityOrganizationOperators.

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best. is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us