Skip to main content

Managing Service level permissions

This feature is currently available as a Private Preview only

During a Private Preview, only customers who have agreed to our Private Preview usage agreements can access this feature. Additionally, the features documented here are subject to change and / or cancellation, so they may not be available to all users in future.

For more information about our Private Preview releases, including the level of Support offered with them, see: Feature release types.

Services are the highest level of feature and content organization, giving user permissions across a service within your Celonis Platform. Services can contain multiple containers and objects, whereas a container and its object are stored within a service.

All service permissions can be assigned and managed by team admins by clicking Admin & Settings - Services permissions. This takes you to the Services permissions page.

You then have the following Service level options:

  • Managing individual Services: Click into a Service to view existing granular permissions, see an overview of team roles, and then assign permissions to existing team members.

    In this example, the Studio service allows team admins to view all users that have access to the Studio service and individual Studio spaces.

    A screenshot of how you can manage service level permissions in the Celonis Platform.

  • Advanced settings: These settings allow you to control who can change permissions in the Celonis Platform asset.

    Advanced_settings.png

    You can choose between:

    • Standard: All users have the option to edit permissions on assets according to their individual permissions

    • Restricted to permission administrators: Only permission administrators can edit permissions on all assets.

    A screenshot of how you can manage service level permissions in the Celonis Platform.

  • Exporting CSV of existing permissions: You can view and export (CSV file) your existing Celonis Platform permissions based on users, groups, applications, and a complete export of all permissions.

    For more about exporting Celonis Platform permissions, see: Existing permissions.

    A screenshot of how you can manage service level permissions in the Celonis Platform.

Assigning service levels permissions for individual users, groups, and apps

You can assign service-level permissions to individual users, groups, or apps, granting them access only to that specific service. You’ll need to repeat this process for each service you want to assign permissions to.

To assign service level permissions:

  1. Click Admin & Settings - Service permissions.

  2. Select the service you want to assign permissions to and click Assign permissions.

  3. Select the subjects you want to assign permissions to and click Next.

    The available subjects are limited to only those that don't currently hold permissions to this service.

  4. Select whether the subject should be granted with all permissions to this service or only the permissions you select.

  5. Click Assign permissions.

The subject now holds the assigned permissions to this service.

You can manage these permissions, including revoking access to that service, by returning to the service permissions page and clicking into the subject's individual permissions.

managing_revoking.png

Managing existing service level permissions

You can manage these permissions, including revoking access to that service, by returning to the service permissions page and clicking into the subject's individual permissions.

To manage existing service level permissions:

  1. Click Admin & Settings - Service permissions.

  2. Click the subject that you want to manage the permissions for, loading their individual permissions page.

  3. Edit the permissions as required.

  4. Click Save.

managing_revoking.png

The permissions for that service have been updated.