Explicit duty segregation - credentials, queues

[Martynas]

From BP 6.4 you can partially segregate teams - separate folders for objects, processes, resources.
Unfortunately some critical parts are still common. It would be great to have a way for teams:

• To manage/see their own credentials
• To manage/see their own work queues

[astrid.stollberger]

We have a pretty big RPA developer community for which our central operations team needs to manage the credentials as we cannot grant everyone the "Manage Credentials" permissions. This is because with "Manage Credentials" permission everyone would be able to change the Password and/or update the "Access Rights" settings for any credential even without knowing the current Password - which is pretty bad.

So we are trying to automate the credential management but here again, it's apparently not possible without UI automation of Blue Prism itself as there is no other way to set the "Access Rights" for a given credential than via the UI.

It would be great if there would be either 
a) a simple API which would allow creation of credentials (including Access Rights settings) in an automated fashion
b) [preferred option] a better access management / authorization check for credential management, so that we could just grant everyone the "manage credentials" permission and if they have the current password they can update/delete the credential if they want to; if not, they will not be able to edit the credential. Only System Admins should probably still be able to edit any credential without having to provide the current password.

[ChristianLinden]

this is a showstopper for us trying to implement full teams segregation

[MelanieGiuliani]

Hi Martynas,

Thanks so much for submitting your idea! We are moving it into the Under Consideration status while we route the idea through our internal review process. 

We will update you as your idea moves along the lifecycle.

Thank you!

Melanie 

[RubenRaveel]

Indeed, without this functionality, MTE is not usable in a Production environment

[RameshChandramo]

very disappointing/surprised to hear that this functionality is not available. There is no point in using Multi Team Environment  and it is a big show stopper for us too.

Do you have any ETA on when this feature will be available?

[MelanieGiuliani]

Hi @Ramesh Chandramouli - this idea is currently being routed through our internal review process to determine whether this is something we can add to the roadmap or not. Once the internal teams have made a decision, I will update this idea with a comment and advance the idea stage. To get updates on this, please be sure to "follow" this idea by clicking on the star to the right of the idea title. ​

[peterlacken]

I have just requested exactly this feature too! Given work queues have a group / folder concept it would seem totally natural to extend MTE to the group type.

[Martynas]

Hi Peter,
good to know there's more demand for it 🙂

[Peeleti_Devendra]

Hi Team,

We would recommend that along with existing Multi Team setup

1, segregation  of Process and object logs based on user role and process group and object groups.
2.  segregation of Work Queues based user role and permission 
3, segregation of Credential manager based on user roles

it would be great if you add those suggestion in blueprism for MTE.

[JiteshSampat]

Yes, I support this idea and would like Blue Prism to actively try to implement this... It will be a huge boon for RBAC...​