Restricting Access to Batches in the Dashboard

rmcentire · July 2020

We have 4 different user groups set up in Active Directory and we would like to restrict user access to batches in the Dashboard.

We originally thought we would add security via the Process > Advanced > Security tab. We have since learned that only restricts access to viewing/editing this in the Design Studio itself. Access in the Dashboard is unchanged.

User Groups:
Admin - will have full access to all batches
Direct - will have full access to the Direct Exception Queue
PO - will have full access to the three different PO Exception Queues
Read-Only - will have 'read' access to the Direct & PO Exception Queues (4)

Currently everyone can access every batch in the Dashboard. Any assistance on how to restrict this access is appreciated.

GrooperGuru · July 2020

These different "Queues" that you're mentioning... are these just specific steps in one or more processes, or is each Queue referring to a completely different Grooper Batch Process?

rmcentire · July 2020

@GrooperGuru, the queues are different processes. We have 7 processes and want to limit access to the processes - not every department needs to see every process/queue.

cerkit · January 2021

Any answers to this question?

qrex · January 2021

Assign rights to each process using Advanced - Security tabs, we use Active Directory groups, then publish. You can also assign rights by folder. We have folders for division and folders under that for depts under that division. Those folder rights don't currently work, but you can use them to copy from. (see Gotcha #1)

Gotcha's:

Inherited permissions don't inherit. Copy those to each process using the "Copy Inherited" button
Double check and correct published version has same security. Use Advanced - Security tabs

New batches should have the new security restrictions. User will see batches that have no security assigned or batches assigned to their group.

Good Luck!

Restricting Access to Batches in the Dashboard

Answers