Advanced access control across Design

What it is

Flowable Design now offers UI-configurable access control across a wider modelling surface. From the UI an admin decides who can create, edit, delete, publish and force-unlock the artifacts in Design. Permissions apply at three levels, global, workspace and app, so you can set a broad policy and refine it where a specific team or application needs tighter control.

What’s included:

• UI-configurable access control.
• Three scopes: global, workspace and app.
• Control over create, edit, delete, publish, publish approval and force-unlock actions and more.

Why it matters

As more people model in Design, you need to be sure that only the right people can change or publish the right things. Defining access control directly in the UI puts that authority in the hands of the people who own the workspaces and apps, without a configuration round-trip. The result is clear separation of duties and a lower risk of an unintended change reaching production.

How it works

An admin creates custom roles in Design, that have permissions associated and then assigns these roles on a global, workspace or app level to a group or a user.

Example

An organisation lets any modeler in a workspace create and edit models, but reserves publishing for a small group of release owners. At the app level, one sensitive application is locked down further so that only two named people can edit it at all. Force-unlock, which clears another user’s lock, is restricted to leads, so only they can unlock models that have been left locked for a long time.