Fine-grained Permission Setting for Better Access Control

[Jia_XingZhang]

Up to current version of Blue Prism (v6.10.1 as of writing), unlike the granularity set forth in the Process Studio & Object Studio, many role-based permission settings are too coarse to align with our live role & responsibilities according to our enterprise IT governance policy. For instance, there’s only an overall setting for ‘System - Calendars’, where view/edit permissions are not further segregated. It renders difficulty to our production support team during troubleshooting. Many other coarse-permission settings under the ‘System Manager’ group can pose tricky situations alike.

Rationale behind our case: For our RPA production support team and Control Manager, we need to enquire the calendar setting to ensure the calendar are defined correctly. However, at the same time, our IT Compliance has a tight guideline that all system script deployment and configuration change can only be done at particular time windows and by designated group of staff. 

We believe this situation is common in industry.

Related Idea:

View Only Permission for Credential Manager

[CalvinLau]

This access control with further breakdown is useful and important, to meet the production support need, and enterprise's governance need.    Agree and suggest to add.   Cheers!

[SunHung]

A fine-grained access control can strike a balance between security concern and support needs. It is a good idea especially for the finance institutions!

[GriffinZhang]

What a good idea. Supportive 👍

[WillLeung]

Our team also need this features. Please help to improve. It is very useful and important to our maintenance work.

[MelanieGiuliani]

Hi Jia,

Thank you for your idea! Our internal team has reviewed it, and has determined that we need a bit more information before we're able to make a decision on how to advance your idea along the lifecycle. 

Can you please provide any examples of more specific responsibilities that you'd like to segregate?

Thank you,
Melanie

[AmyTsaousi]

Hello Jia, 
We've reviewed your idea again and still determined that we need additional information. Can you tell us more about your particular use case to provide additional insight for your idea? 

If we don't get the additional information we need to proceed with routing this idea through to under consideration within the next 30 days we will have to mark this idea as not planned. 
Thanks,
Amy

[AmyTsaousi]

Hi Jia, 
Unfortunately as we haven't received additional information to understand the reason behind your idea, we've marked the idea as not planned as we aren't able to take your idea into consideration. 

Thanks,
Amy