Permissions Manager

The Permissions Manager lets you control exactly who can access, modify, or use specific platform resources — including workflows, categories, credentials, credential pools, report templates, and dashboards. Without granular permissions, every user with a role would have blanket access to all resources of that type, which doesn't work for organizations with multiple teams or compliance requirements. You assign permissions at the user or group level, and the highest permission granted — whether directly to the user or through a group — is the one that applies. Before deleting any credential, workflow, category, or report template, you must first revoke its associated permissions. This ensures your access control stays clean, auditable, and aligned with your organization's security policies.

Note

• The highest permissions assigned to a user or user group, are applied to the selected user or user groups.

  For example, if a user has Use permission and belongs to a user group that has all three permissions, that is, View, Modify, and Use, then the user will also have all three permissions.

• Users can configure the ae.permission-manager.user-states.filter property as true in the ae.properties file to view users who have Unverified status on the permissions assignment page.

Important

To delete a credential, credential pool, workflow category, workflow, or report template ensure that you revoke any permissions associated with them.

For details about working with permissions, see:

• Assign workflow permissions
• Assign credentials or credentials pool
• Assign report permissions