Role management
The Role Management page lists all roles available in the system and provides access to role management functions.
To access, go to System Settings > Role Management.
On this page, you can perform the following actions:
- Create a new role
- Edit an existing role
- Delete an existing role
Create or edit role
Click Create Role or, in the Name column, click a link to edit the role. The following screen is displayed.
Enter a unique Name for the role.
In the Description field, specify the role details.
In the Select Role Permissions section, select permission checkboxes required for the role.
Click the Save button.
As a result, the created role appears in the Role Management table. You can grant it to Intelligent Automation Cloud Enterprise users via the User Management page.
Explore default roles' permissions
| Permissions/Roles | Administrator | Developer | Operator |
|---|---|---|---|
| View Analytics | ✓ | ✓ | ✓ |
| View Tasks | ✓ | ✓ | ✓ |
| Task Designer | ✓ | ✓ | |
| Task Advanced Options | ✓ | ✓ | |
| View Results | ✓ | ✓ | ✓ |
| Generate Snapshot | ✓ | ✓ | ✓ |
| Task/Business Process Actions | ✓ | ✓ | ✓ |
| View Business Processes | ✓ | ✓ | ✓ |
| Import/Export | ✓ | ✓ | |
| View Campaigns | ✓ | ✓ | ✓ |
| Manage Campaigns | ✓ | ✓ | |
| Schedules | ✓ | ✓ | ✓ |
| Manage Templates | ✓ | ✓ | |
| Manage Bot Configurations | ✓ | ✓ | |
| Manage Rules | ✓ | ✓ | |
| Manage Data Stores | ✓ | ✓ | |
| View Data Stores | ✓ | ✓ | ✓ |
| Manage Workers | ✓ | ✓ | ✓ |
| Manage Qualifications | ✓ | ✓ | ✓ |
| System Preferences | ✓ | ||
| Manage Data Sources | ✓ | ✓ | ✓ |
| Manage Bot Sources | ✓ | ✓ | |
| Manage Answer Types | ✓ | ✓ | |
| Run priorities | ✓ | ✓ | ✓ |
| Manage Use Cases | ✓ | ✓ | |
| Manage Users and Groups | ✓ | ||
| Activity Log | ✓ | ||
| View Secrets Vault Aliases | ✓ | ✓ | ✓ |
| Manage Secrets Vault Aliases | ✓ | ||
| View Secrets Vault Entries | |||
| Manage E-mails | ✓ | ||
| Manage Data Purge | ✓ | ✓ | |
| Erase Use Case Data Stores | |||
| Advanced Package Import | ✓ | ||
| Process Deep Copy | ✓ | ✓ | |
| Bot Task Monitoring Access | ✓ | ✓ | |
| Manage Platform Monitor | ✓ | ||
| View Platform Monitor | ✓ | ✓ | |
| Manage AutoML Settings | ✓ | ✓ | |
| Manage models |
Study permission descriptions
View Analytics
The Dashboards page provides a high-level overview of all Enterprise Edition components. It comprises different Widgets (Speed, Capacity, and so on) to visualize statistics and events. By default, it is the first screen you see after logging into Intelligent Automation Cloud Enterprise.
Location: Dashboard
Relative path: /dashboard
View Tasks
The permission allows you to view all created Manual Tasks. To access the task list, go to the main Control Tower (CT) menu and select Manual Tasks > View All Tasks.
Location:
- Manual Tasks
- BP
Relative paths:
- /tasks
- /task/edit/{UUID}
- /task/new
Task Designer
The permission allows you to view, edit, and create Manual Tasks and Business Processes.
Location:
- Tasks
- Business Processes
Relative paths:
- /task/...
- /business-process/...
- /question/...
- /questions
Task Advanced Options
The permission allows you to modify the advanced options of a task.
View Results
The permission allows you to view Task or BP run results:
- Summary
- Workers
- Results Analytics
- Data
- Automation
Location:
- Tasks
- Business Processes
Relative paths:
- task/edit/{uuid}? actTab=RESULTS...
- business-process/edit/{uuid}?actTab=RESULTS...
Generate Snapshot
The permission allows you to generate snapshots for a non-draft BP instance.
Task/Business Process Actions
The permission allows you to copy, pause, stop, resume, delete Tasks and BPs using the Actions menu.
note
The Create Qualification Task action is available when you have Task/BP Actions and Task Advanced Options permissions.
Location:
- Tasks
- Business Processes
View Business Processes
The permission allows you to view all created Business Processes. For that, open the main CT menu and select Business Processes > View All.
Location: Business Processes
Relative path: /business-processes
View Campaigns
The permission allows you to view Campaigns.
Location: Advanced
Relative path: /campaigns
Manage Campaigns
The permission allows you to manage Campaigns.
Location: Advanced
Relative path: /campaigns
Schedules
The permission allows you to start Tasks and BPs according to a schedule.
Location: Advanced
Relative path: /schedules
Manage Templates
The permission allows you to create, edit, copy, and delete Templates. Templates enable reusing objects within Intelligent Automation Cloud Enterprise. Tasks, BPs, and Rules are based on Templates.
Location: Advanced
Relative path: /templates
Manage Bot Configurations
The permission allows you to create, edit, copy, and delete Bot Configs (Bot Tasks).
Location: Advanced
Relative path: /machine-configs
Manage Rules
The permission allows you to create, edit, delete, and copy Rules and Rule Templates. To access the associated functionality, go to Campaigns > Rules, Campaigns > Rule Templates.
Location: Advanced
Relative paths:
- /rules
- /rules-templates
Manage Data Stores
The permission allows to create, edit, delete, and export Data Stores, Field Schemes and Automation Training Sets.
The Data Stores module is a web interface for managing DB tables. You can use Data Stores to keep lookup tables for multi-value Answer options, save BP results, and make queries from Bot Configs and Rules.
Location:
- Business Processes
- Configuration
Relative paths:
- /data-stores
- /training-sets
- /field-schemes
View Data Stores
The permission allows you to only access, view, and download Data Stores. However, you cannot delete or update them via the applications or via API.
Location:
- Business Processes
- Configuration
Relative paths:
- /data-stores
- /training-sets
Manage Workers
The permission allows you to view and manage:
Location: Workers
Relative paths:
- /workers
- /workforces
- /assign-qualification
Manage Qualifications
The permission allows you to create, edit, delete, and assign Qualifications and Qualification Sets.
With qualifications, Intelligent Automation Cloud Enterprise enables you to ensure quality performance of workers.
Location: Workers
Relative paths:
- /qualifications
- /qualification-sets
System Preferences
The System Preferences page contains all instance parameters:
- Account Settings
- User Settings
- Advanced
- Active Tasks
- Schedule Settings
- Filters
note
The User Settings tab is available for any user.
Location: Configuration
Relative paths:
- /account
- /filters
Manage Data Purge
The Data Purge job deletes input data, task and BP results, generated snapshots, and Event Logs from an instance after a defined period of time.
Location: Configuration
Relative path: /account
Erase use case data stores
The permission allows you to remove use case data. Read also Data Stores purging.
Manage Data Sources
Data Source is a mechanism that provides input data and configuration for your BPs and Tasks. This input format is best suited for those Use Cases where data resides on an external source such as SFTP Server.
Location: Configuration
Relative path: /data-sources
Manage Bot Sources
The permission allows you to manage Bot Sources. For details, read the Bot sources article.
Manage Answer Types
The Answer Types screen allows you to create and manage Answer Types within Intelligent Automation Cloud. These Answer Types are used when creating Tasks, ETL Configs, and Field Schemes and adding Answers to them.
Location: Configuration
Relative path: /answer-types
Run priorities
The permission allows you to create, edit, and delete Run Priorities.
Location: System Settings
Relative path: /run-priority
Manage Use Cases
Use Cases serve as the foundation for both Tasks and Bot Configurations. They describe the workflow of a particular Business Process, and thus serve as a template to create Tasks based on that workflow.
Location: Configuration
Relative paths:
- /use-case-categories
- /use-cases
Manage Users and Groups
The permission allows you to view, create, edit, and delete users and roles.
note
This permission does not allow you to edit user emails.
Location: Configuration
Relative paths:
- /users
- /roles
Activity Log
The permission allows you to use the Activity Log module.
Location: Configuration
Relative path: /activity-log
View Secrets Vault Aliases
The permission allows you to view aliases in Secrets Vault and use them in Business Processes.
Location: Configuration
Relative path: /secure-storage
Manage Secrets Vault Aliases
The permission allows you to view aliases, as well as create, update, and delete records in Secrets Vault.
Location: Configuration
Relative path: /secure-storage
View Secrets Vault Entries
This permission is available with the Manage Secrets Vault Aliases permission only. It provides access to view all entries in Secrets Vault if no filters are assigned to a user.
Location: Configuration
Relative path: /secure-storage
Manage E-mails
The permission allows you to edit user emails while creating or editing a user profile.
Location: Configuration
Relative path: /users
Import/Export
The permission allows you to import and export Campaigns, Runs, Use Cases, Packages, Templates, and so on. Without the permission, users cannot see the import and export functionality on CT pages and view the Packages tab for Tasks or Business Processes.
Location: All pages
Relative paths:
- /campaigns
- /templates
- /machine-configs
- /questions
- /rules
- /rules-templates
- /qualification-sets
- /use-case-categories
- /use-cases
Advanced Package Import
The permission allows you to overwrite process versions with significant differences (steps added, deleted, or substituted). See Migrate Packages of Tasks and Business Processes.
Location:
- Tasks
- Business Processes
Relative paths:
- /business-processes
- /tasks
Process Deep Copy
The Deep Copy option is used to create a completely unlinked process instance, where all steps are separated from the ones in the source BP. See Copy Business Process.
Location: Business Processes
Bot Task Monitoring Access
The permission allows you to access and monitor the following:
- Bot tasks under execution grouped by Bot Sources
- Records under execution and submitted but not started Records
- Thread dumps for Bot Tasks filtered by process UUID
- Bot Source metrics, such as active record threads, record queue size, executed record total
Location: REST API
Relative paths:
- /api/v1/monitoring/bots/sources
- /api/v1/monitoring/bots/sources/{source-name}
- /api/v1/monitoring/bots/thread-dumps
- /api/v1/monitoring/bots/thread-dumps?businessProcessUuid={bp-uuid}
Manage Platform Monitor
The permission makes it possible to manage Platform Monitor objects, such as bots.
Relative path: /v1/jwt/redirect
View Platform Monitor
The permission makes it possible to view Platform Monitor.
Relative path: /v1/jwt/redirect
Manage AutoML Settings
The permission allows you to view the Configure AutoML tab and configuration settings for Manual Task automation.
Location: Tasks
Manage models
The permission allows you to view the AutoML menu and interact with its items to manage hyper models, trained models, and model training.
Location: AutoML
Mind permission restrictions
When a user has a role without appropriate permissions, the following restrictions are possible in the user interface:
Main menu items are not displayed
Restricted permissions 
All permissions 
Action buttons and links are not displayed
Restricted permissions 
All permissions 
Access Restricted message when trying to open a direct URL
Explore known issues
- Impossible to delete a role assigned only to a group. No messages appear after the Delete Confirmation operation.