Skip to main content
close Search
Close search

Challenge

Securing an application using role-based access control

2 Tasks

20 mins

Visible to all users
Beginner Pega Platform 8.2 English

Scenario

In the Employee Evaluation case, TGB provides an optional, case-wide action to update an employee’s goals. The Human Resources (HR) department requires that HR business partners can run the UpdateGoals action at any time.

The following table provides the credentials you need to complete the exercise.

Role Operator ID Password
Senior System Architect SSA@TGB rules
HR Business Partner HRPartner@TGB rules

Your assignment

Create a privilege and add it to the UpdateGoals flow action. Then, use the Access Manager to add the privilege to HR staff.

Before testing your changes, remember to check in all rules from your personal ruleset.

You must initiate your own Pega instance to complete this Challenge.

Initialization may take up to 5 minutes so please be patient.

Detailed Tasks

1 Secure an application using role-based access control

The following table provides the credentials you need to complete this portion of the exercise.

Role Operator ID Password
Senior System Architect SSA@TGB rules

Create and add a privilege to the UpdateGoals flow action

  1. Log in to the exercise environment with Operator ID SSA@TGB using password rules.
  2. Open the UpdateGoals flow action in the TGB-HRApps-Work-EmployeeEvaluation class.
  3. On the Security tab in the Privilege name field, enter UpdateGoals.
    Privileged
  4. Click the crosshairs icon to create the privilege.
  5. On the Create Privilege form, click Create and open to create the UpdateGoals privilege.
  6. Click Save to save your changes to the privilege rule form.

  7. Save the UpdateGoals flow action.

Add and configure the privilege for the roles

  1. From the Dev Studio Configure menu, select Org & Security > Access Manager > Privileges to open the Privilege tab for the Access Manager.
  2. In the Role field, enter HRApps:HR.
  3. In the Case Type field, enter TGB-HRApps-Work-EmployeeEvaluation.
    Access Manage
  4. Below the AllFlowActions privilege, click the plus icon to add a privilege.
  5. Select the UpdateGoals privilege.
  6. Select Full Access.
    Add privilege
  7. Click OK.

2 Confirm your work

Verify access for HR staff

The following table provides the credentials you need to complete this portion of the exercise.

Role Operator ID Password
HR Business Partner HRPartner@TGB rules
  1. Log in to the Case Manager portal with Operator ID HRPartner@TGB using password rules.
  2. Create a new employee evaluation case.
  3. Click Actions and verify that the Update goals action is available on the menu.
    Actions menu
  4. Click Change stage to move the case to the second stage.
  5. Click Submit to move the case to the next stage.
  6. Click Actions and verify that the Update goals action is still available on the menu.

If you are having problems with your training, contact Pega Academy technical support.

Did you find this content helpful?

Want to help us improve this content?

Suggest an edit

We'd prefer it if you saw us at our best.

Pega Academy has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice