System Permissions
System Permissions define user capabilities related to accessing the system, managing delegations, and handling access keys.
System Permission Types and Descriptions
| Permission | Description | Effect |
|---|---|---|
| System Access | Permission to log into the system | Must be used together with Web UI Access to allow login to the system. |
| Delegation > View | Allows viewing of delegations defined by the user | Displays the delegation list under the Delegation and Access Keys tab in My Account menu. |
| Delegation > Manage | Allows creating new delegations in the system | Enables adding and managing delegations in the same tab. |
| Login As Another User | Permission to log in as another user | Displays the Login as Another User option in the user menu. |
| Access Key on Behalf Of | Permission to generate access keys on behalf of another user | Used in the developer interface to create access keys for another user. |
| View Logs | Permission to view logs (if system logging is enabled) | Activates the Event Log Viewer in the user menu. |
| Start Flow As | Permission to start a workflow on behalf of another user | Used to create functions in the developer interface to start flows as others. |
| Continue Flow As | Permission to take action on a flow pending for another user | Allows users to access and act on workflows assigned to someone else. |
| Access Keys > View | Allows viewing access keys defined by the user | Displays access keys under the Delegation and Access Keys tab. |
| Access Keys > Manage | Permission to create, update, delete, or revoke access keys | Enables full management of access keys within the same tab. |
| License | Permission to view license status | Grants access to the License Management module under Management Tools. |
Authorization and Usage Conditions
- Permissions can only be assigned by admin users or users authorized by admins.
- Login as Another User feature is intended for use in test environments only.
Related Notes
- Inheritance: Permission groups can be linked. In such cases, permissions granted in the parent group are inherited by the child group. The
Reasonbutton shows from which group a permission is inherited. - Permission Assignment: Each permission key has
Allow,Deny, andUnassignedoptions.Denyis the dominant setting. Even if a user is allowed via another group,Denywill override that access.
seeAlso
- Manage Permission Groups
- #linkDocument(UserGuide.ManagementTools.WebUIPermissions)
- UserSettings Delegations
- Access Tokens
- License Management
FAQs
- What happens if a user has conflicting permissions in multiple groups?
- What permissions are required to define or manage delegations?
- Why is "System Access" permission required?
- Why can't I process a workflow on behalf of another user?
- Which permissions control Access Key visibility and usage?