Access of Role to Object rules

Access of Role to Object rules specify permissions that are granted to a role and access class. These permissions restrict what developers and operators can do with rule and data instances. An Access of Rule to Object rule applies to all instances of its access class.

Access Manager simplifies the process of granting authorization. As a best practice, use Access Manager instead of working directly with the Access of Role to Object rule form. For more information, see Access Manager landing page.

Use the rule form to do the following tasks:

• Create or delete an Access of Role to Object rule.
• Specify settings for an Access of Role to Object rule. For more information, see Defining access settings for an Access of Role to Object rule.
• Specify production levels 2, 3, or 4 for an access control. For more information, see Defining access controls for an Access of Role to Object rule.

Typically, an access group contains multiple roles. At run time, the Access of Role to Object rules for all of the user's roles are evaluated. The rule with the most permissive setting takes precedence. For example, if the user's access group has roles A and B, and role A does not have access, but role B has access, then the user has access.