Skip to main content

Permissions for Facets

After activating the feature, you can assign permissions to each facet as you would for other elements. These permissions then become the defaults for elements within the facet and are added to the default permissions of the user. In addition to the normal consequences of permissions for elements, the facet is completely hidden if the user does not have the Show permission for the facet, meaning the facet is not visible in the navigation or the detail content of another element.

If you only want to hide a facet in the navigation (e.g. in Viewer mode), but want to grant Show permissions for the elements of the facet, you cannot use the facet permissions for this. For this purpose, you should use the Hide Navigation customization.

Activating the Feature Permissions for Facets

    1. Go to the Admin area in Process Designer and click the Features tile.

    2. Select Architectural Permissions and change Activation to Activated.

      activating-feature-facet-permissions-2.png

Please note the consequences of activating this feature; read the explanation under “Activation” carefully.

Changing permissions in Facet administration

  1. Go to the Admin area in Process Designer and click the Facets tile.

  2. Select facet to change permissions for and open the Permissions menu from the toolbar:

    activating-feature-facet-permissions-4.png

Please note that Permissions menu in the toolbar is deactivated when Feature “Permissions for Facets” is not active.

After selecting the Permissions menu item, new Permissions dialog will be opened. Permission dialog allows following options for defining permissions.

activating-feature-facet-permissions-5.png

  • Name (shows the name of the selected item for which permissions are defined, in this case selected facet)

  • Permitted groups (define what groups will be configured for selected item permissions, the selected item will be showed if user group have at least show permission)

  • Inherit permissions ( does not affect permissions for facets)

  • Permission modeExclude other users (only users of selected user groups will have access to the selected item)Permissions of other users unchanged (users that are not part of the selected user groups are unaffected by permissions defined here)

Examples:

1. Access to navigation and other elements in facet

Only users from user group OrganizationAccess can access and edit elements from organization facet.

  • Selected item: facet Organization

  • Permission group: OrganizationAccess with permission set that have Show, Open, New and Delete permissions

  • Inherit permissions: not important

  • Permission mode: Exclude other users

In this example only users that are part of user group OrganizationAccess can access menu item that is related to Organization (graphic, hierarchy, document content). Other sub-items in navigation like roles, groups, and locations are facets of their own, so the permissions for them should be done separately. Also for this users Organizations are visible and editable from the other parts of Celonis Process Management such as process diagrams. Other users that are not part of this user group will have no access to Organization facet. Because no permissions are defined on roles, groups and locations, these menu-items will be accessible for other users.

2. Hiding top level navigation items

To completely hide Organization menu item from navigation, all menu sub-items should be also hidden. In this case same permissions should be applied to all Organization, Roles, Groups and Locations facets:

  • Selected item: facet Organization, Roles, Groups, Locations

  • Permission group: OrganizationAccess with permission set that have Show, Open, New and Delete permissions

  • Inherit permissions: not important

  • Permission mode: Exclude other users

In this example all others users not part of the user group OrganizationAccess will not be able to see or access Organizations and other sub-menu items from navigation. Also in other parts of Celonis Process Management organizations will not be visible.