Skip to main content


         This documentation site is for previous versions. Visit our new documentation site for current releases.      
 

Configuring access groups

Updated on September 14, 2021

A new application includes Pega-provided access groups and access roles that you can view in Dev Studio by clicking Dev Studio > Org & Security > Groups & Roles.

Pega Knowledge Implementation Guide

It is a best practice to create new access groups and roles that are based on the default access groups and roles that come with the product. This insulates your application from changes if the roles and groups change permissions in a future release.

Important: Misconfiguration of the KM Help Site access groups might lead to unintended data exposure and cause a security risk to your enterprise. The ExternalKMUserAG and ExternalKMAG access groups are intended for external users and default to the KM help site portal. The Pega Knowledge application uses KMHelpPortal as the default portal for the ExternalKMUserAG and ExternalKMAG access groups. Therefore, the activated portal must be KMHelpPortal. If your organization has changed or customized these access groups, ensure that the activated portal is set to KMHelpPortal. For more information, see Pega Security Advisory – B21.
  1. Click Dev Studio > Org & Security > Groups & Roles >Access Groups.
  2. Select the access group that you want to use, for example Pega:Manager.
  3. Select the access role that you want to use, for example KMApprover.
  4. Click Save as to save the role to your application. It is recommended that you name the role with a different name. Update the roles to use the ones that you created for your application.
  5. Click Create and open.
  6. In the Definition tab, map the Name and Version field details with your application and click Save.
What to do next: Add an access role.

To add an access role:

  1. In the Explorer panel, click Records > Security > Access Role Name.
  2. Select the access role that you want to use, for example KMAuthor.
  3. In the Access Role field, click the filter icon and enter PegaKM in the Search Text box.
  4. Click Apply.
  5. Select the access role that you want to use, for example KMApprover.
  6. Click Save as to save the role to your application. It is recommended to give the role a different name.
  7. Click Create and open.
  8. Click Save.

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best.

Pega.com is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us