Roles

In AE, there are two types of roles that you can work with, System Defined Roles and User Defined Roles.

• System Defined Roles, as the name indicates, are default roles provided by AutomationEdge. For details, see System Defined Roles.

• User Defined Roles, as the name indicates, are custom roles, created by users, as per the tenant requirements. The tenants can create multiple custom roles, and assign permissions as required. For details, see User Defined Roles.

System Defined Roles

System defined roles are provided by AE and have predefined permissions. You cannot modify or delete the roles or the permissions assigned to the roles.

You can only view the permissions assigned to the roles. When you sign in as an Admin, the following roles are available:

List of system defined roles

The section lists the roles provided by AE.

• Admin
  The Admin is responsible for maintaining the system for a specific tenant. The Admin creates users, workflows etc., for the tenant. The Admin is a super user having all the permissions of Workflow Administrator, User Admin, Activity Monitor and Tenant User.

• Activity Monitor The Activity Monitor users are responsible for AutomationEdge monitoring. The user has access to the following menus: Home (Dashboard view only), Reports, Agent Monitoring (view only) and Requests (view only).

• Agent Admin The Agent Admin is responsible for controlling or managing agents.

• User

• The User role has the lowest level of access to the system. The users can perform the following actions:

  • Run the workflows and view the results.

  • Publish workflows if permission to a category is provided.

  • Update a workflow if they have permission to the workflow or category.

tip

In the current release, users with the User role cannot upload workflow level files.

• User Admin The User Admin is responsible for maintaining users with User and User Admin roles for a specific tenant. A User Admin can also manage the Tenant Policy.

• Workflow Admin

The Workflow Admin is responsible for maintaining all the workflows for a specific tenant.

View role permissions

To view role permissions:

1. In the menu, navigate to Roles. The Roles page appears.

2. Click System Defined Roles tab. The list of roles appears.

3. Click . The selected role's permission details page appears. For example, if you select User, the permission page appears as follows:

1. The following details are available:

Field Name	Description
Role Name	Displays the name of the role.
Description	Displays the description of the role.
Web POrtal Access	Displays the selected checkbox.
	Note: If the checkbox is selected, then users can sign in to AEUI with both, API and UI access. Else, the user will have only API access to allowed modules.
Permissions
Capability	Displays the name of capability that the role is assigned with.
Description	Displays the description of the capability.
Permission	Displays the permission granted for a capability or sub-capability assigned to the role.
	Permission values are: Allow or Deny.
	Note:To view the permission at capability or sub-capability level, click each capability:
	- If each sub-capability has either Allow or Deny, then at the Capability level the permission is seen as, Allowed All or Deny All. For example,
	- If the permission at sub-capability level is a mix of Allow and Deny, then neither Allow All or Deny All is selected at the Capability level. For example,
Impact	Displays the impact of the assigned capability. Impact values are: High or Medium.
	High: Permissions impacting the business highly. For example, permission to delete a tenant.
	Medium: Permissions impacting the business, but at the user level in a tenant. For example, permission to enable or disable the workflows.

tip

You can search for a capability by providing the name of the capability or description. You can also filter the view based on permission and / or the impact.

User Defined Roles

You can create new roles. The roles can be based on the system defined roles, which will have same set of permissions. However, you can modify the permissions. Or, you can create a completely new role to which you can assign the required permissions.

To create new roles

1. In the menu, navigate to Roles. The Roles page appears.

2. In the User Defined Roles tab, click New Role. The New Role page appears.

3. Enter the following field details:

Field Name	Description
Role Name	Enter a name for the role you want to create.
Description	Enter a description of the role.
Select Template Role	Select the role based on which you want to create the new role. Available options are:
	- Admin
	- Activity Monitor
	- Agent Admin
	- User Admin
	- User
	- Workflow Admin
Web Portal Access	Select the checkbox to allow users to sign in to AEUI with both, API and UI access.
	Note: If the checkbox is clear, then the user will have only API access to allowed modules and will be unable to access the UI pages. For example, see the followin screenshot:
	You will be unable to modify the permission of the Workflow Permissions Page, which is accessed through the UI However, you can modify permissions of other sub-capabilities that can be accessed through the API
Permissions	Note: If you select the system defined role for creating the new role, then by default all the system defined role's permissions are assigned to the new role. However, you can modify the permission details.
Capability	Displays the name of capability that you can assign to the role
Description	Displays the description of the capability.
Permission	Displays the permission available for each capability. If you want to assign complete permissions to a capability, click Allow All. Else, click on the capability and provide permission at sub-capability level.
	Similarly, you can deny permission at the capability or sub-capability level.
Impact	Displays the impact of the assigned capability.
	Impact values are: High or Medium.
	High: Permissions impacting the business highly. For example, permission to delete a tenant.
	Medium: Permissions impacting the business, but at the user level in a tenant. For example, permission to enable or disable the workflows.

1. Click Save. The new role details are saved.

tip

• To modify the role and permission details, click
• To delete the role, click
• The new roles appear in the Role list in the Users → User List → Add New User page.