Using RBAC to manage access to dashboards

4 Tâches

30 mins

Pega Platform '25 (English)

Pega Platform '25 (日本語)

Visible par : All users Applies to: Pega Platform '25

Intermédiaire

Security

Anglais

Scénario

The TGB organization has decided to limit access to the Dashboards exclusively for managers. To enforce this restriction: 

• Create a privilege for the Manager. 
• Apply privileges to respective Access Roles.

The following table provides the credentials you need to complete the challenge.

Role	User name	Password
Senior System Architect	SSA@TGB	pega123!
Manager	Manager@TGB	pega123!
User	User@TGB	pega123!

Vous devez initier votre votre propre instance Pega pour compléter ce Défi.

L'initialisation peut prendre jusqu'à 5 minutes, donc soyez patient.

• Se connecter

Détail des tâches

1 Create a Privilege for Manager

1. In the Pega instance for the challenge, enter the following credentials:
   1. In the User name field, enter SSA@TGB.
   2. In the Password field, enter pega123!.
2. In the header of Dev Studio, click Create > Security > Privilege to create the privilege.
3. In the Label field, enter CanViewLPDashboard.
4. In the Context section, in the Apply to field, enter or select Data-Portal, and select the highest available unlocked Ruleset version.
5. Save the privilege.

2 Apply the privilege to the HRApps:Manager Access Role

1. In the navigation pane of Dev Studio, click Records > Security > Access Role Name to open the instances of the Access Role Name.
2. Click on HRApps:Manager to open the existing User Access Role. 
3. On the Role tab, in the Access Class column, click the Data-Portal Access Role to edit.
4. In the Privileges section, in the Name field, enter or select the CanViewLPDashboard privilege, and in the Level field, enter 5.
   
5. Click Submit to save and dismiss the Add/Edit role window.
6. Save the Access Role. 

3 Create a When Rule to hide the dashboard for all users

1. In the header of Dev Studio, click Create > Decision > When to create the When Rule.
2. In the Label field, enter CanViewLPDashboard.
3. In the Context section, in the Apply to field, enter or select Data-Portal, and select the highest available unlocked Ruleset version.
4. In the Advanced tab, click the Configure advanced configurations here... dropdown and select [expression evaluates to true].
   
5. In the Expression builder, enter @Default.HavePrivilege(tools,"CanViewLPDashboard",.pxObjClass,myStepPage).
6. Save the When Rule.
   

4 Apply the when condition to hide the Dashboards

1. In App Studio, click Channels > Web portal to edit the web portal.
2. In the Main navigation, configure the page visibility condition for the Dashboards to evaluate CanViewLPDashboard When Rule.
   
3. Save the Web portal.

---

---

Disponible dans la mission suivante :

• Senior System Architect v8