Managing application access

2 Aufgaben

5 Min.

Visible to: All users

Anfänger

Pega Platform '24.2

Security

Englisch

Szenario

GoGoRoad Product Managers want to restrict access to development on the New Vendor Case Type so that only approved roles can perform updates. Configure permissions on the New Vendor Case Type to prevent anyone with the User role or the Auditor role from performing any Actions on the Case Type.

The following table provides the credentials you need to complete the challenge:

Role	User name	Password
Application Developer	author@gogoroad	pega123!
User	user@gogoroad	pega123!
Territory Manager	territorymgr@gogoroad	pega123!
Auditor	auditor@gogoroad	pega123!

Challenge-Schritte

Genaue Übungsschritte

1 Set permissions for the User role in App Studio

In the Pega Platform™ instance for the challenge, enter the following credentials:
1. In the User name field, enter author@gogoroad.
2. In the Password field, enter pega123!.
In the navigation pane of App Studio, click Users > User management to display the Personas that are associated with the application.
Click Users to view the authorizations for the User Persona.
In the New Vendor row, click the Configure access icon.
In the Configure access to 'New vendor' dialog box, clear all the checkboxes, and then click Submit.

Hinweis: The system automatically saves changes on the Persona access landing page.

2 Set permissions for Auditor role in Dev Studio

Switch to Dev Studio.
Click Configure > Org & Security > Access Manager to open the Access Manager.
In Organization and Security: Access Manager, in the Access Group list, select GoGoRoad:Auditor.
To the left of New Vendor, click the arrow to expand the child rows.
In the Open row, click on the green checkmark in the GoGoRoad:AuditorManaged Role column.
Select No access and click OK.
Repeat steps 5 and 6 and confirm Modify, Run Reports, Delete, Perform, View History rows are set to No access.
Click Refresh to confirm the changes.

Arbeit überprüfen

In the lower-left corner of the window, click the profile icon, and then click Log off to log out of Pega Platform.
In the Pega Platform instance for the challenge, enter the following credentials:
1. In the User name field, enter user@gogoroad.
2. In the Password field, enter pega123!.
Click Create.
Confirm that the Create dropdown has no option to create a New Vendor Case.

Hinweis: In In Pega Infinity™ '23 and older versions, restricted Case Types are not hidden from the Create menu. Instead, clicking on the New Vendor Case Type pops up an error message that indicates you are not authorized to create, modify, or lock New Vendor Case instances.
In the upper-right corner of the window, click the profile icon, and then click Log off to log out of Pega Platform.
In the Pega Platform instance for the challenge, enter the following credentials:
1. In the User name field, enter auditor@gogoroad.
2. In the Password field, enter pega123!.
Repeat steps 3 to 5 to confirm there is no option to create New Vendor Case for the Auditor and log off.
In the Pega Platform instance for the challenge, enter the following credentials:
1. In the User name field, enter territorymgr@gogoroad.
2. In the Password field, enter pega123!.
Click Create > New vendor.
Confirm that the create View displays a new instance of the New Vendor Case Type.

Hinweis: Other roles, such as Manager, can also create a New Vendor Case and provide vendor information.