Access Manager — Authorizing Tools

To access the Tools tab, click Designer Studio > Org & Security > Access Manager > Tools.

About the Tools tab

The Access Manager Tools tab gives you a quick look at the authorizations operators (users) have to tools you can secure in your application. You can also view all access groups in the application and see a "rolled up" summary of authorizations for each access group.

When a tool category is expanded, icons indicate full access, no access, or conditional access granted to members of the access group.

Summarized views can alert you to areas in your business processes that need tighter restrictions. You can easily expand the view to edit the authorizations of a role.

Authorizations are granted based on a user's access group, not the role. The most permissive role in the access group determines the level of authorization for the access group. Access Manager displays an icon indicating the most permissive authorization for an item.

To view authorizations for tools - single access group

1. If you want to view settings for an access group other than your own, select it in the Access Group field.
2. In the Tools column, click the arrow to the left of a tool category to display the tool(s) for which you can set authorization. Access Manager displays one of the following icons to the left of the item, indicating:
• Operators in this access group have full access to the tool.
• Operators in this access group have no access to the tool.  The menu item or UI element is disabled.
• There is some combination of conditional and possibly no access to this tool among operators in the access group.

For example, if the tool is Add Words, a next to it indicates all users in the selected access group can add words to the spell check dictionary.

This table describes the location in the system of each tool. You can place your pointer over a tool name to display a descriptive tool tip.

To edit authorizations for tools

Your access group should provide Full or Conditional Access to the “AccessManager: change authorizations” tool in order to edit authorization settings in Access Manager. You cannot edit standard Pega 7 Platform roles.

1. If you want to view settings for an access group other than your own, select it in the Access Group field.
2. In the Tools column, click the arrow to the left of an item to expand the display.
3. In the column for the access role to be authorized, click the icon and select one of the following for the desired tool:
   

• Full Access to grant operators with this role (as well as all other operators in the selected access group) full access to the item.
• No Access to deny operators with this role access to the item. At run time, the system may hide or inactivate the item.
• Conditional to grant access to the item based on an Access When condition. The system displays a field below the Conditional button. Select an Access When condition under which an operator in the access group can access the item.
  

The list of standard tools available to secure in Access Manager cannot be changed. The Tools tab is populated by the data transform rule pxPopulateTools. However, this rule can apply another data transform rule, pyPopulateTools, to append other tools you define in pyPopulateTools to the bottom of the Tools tab. For more information, see PDN article Adding custom tools to Access Manager.

All Access Groups view

To view authorizations for tools - all access groups

You cannot modify authorizations when viewing all access groups. The display is intended to show you only whether all operators in each access group are fully authorized to access every tool in a tool category (), or all are denied authorization for every user action () -- or whether there is some mix of authorizations among the user actions (). Refer to the example below. A tool category might be Application distribution; tools in it include Import applications or Skim a RuleSet.

1. In the Access Group field, select All Access Groups.
   Here is an example showing the unexpanded display:
   
   
   In the example above, the All Access Groups display indicates tools authorizations by operators in each access group:
   
• All operators in this access group are authorized to use all the tools listed in this tool category.
• No operators in this access group are authorized to use any tools listed in this tool category.
• Operators in this access group are authorized to use at least one tool listed in this tool category, possibly conditionally.

You can expand the view to see authorization for each tool in the category:

Access Manager — Authorizing Work & Process items About Access When rules, About Access Manager

Tools — Application

Designer Studio — About Landing Pages

Open topic with navigation