Permission Groups

App Owners

(Permission Group)

App Owners configured in Manage Center or App Builder is a permission group for users or groups who have full access rights for a specific app in App Builder.

App Owners can be assigned at the global level or for an individual app:

• If App Owners are assigned in Manage Center, they have access to all apps.
• If App Owners are assigned in App Builder, they have access to the individual apps where they are assigned.

An AgilePoint NX tenant can have App Owners assigned at both the global level and assigned to individual apps.

If a specific app has one or more App Owners, this permission group overrides the App Owners configured in Manage Center.

Permissions:

This permission group has these permissions for either all apps or a specific app, depending on whether it is assigned in Manage Center or App Builder:

• Manage permission groups.
• Delete app.
• Check in or check out the app on behalf of other users.
• Roll back the app version.
• View the audit log for an app.
• These permissions from App Designers permission group:
  • View app.
  • Change app.
  • Save app.
  • Check in or check out the app.
  • Publish app.
  • Rename app.
  • Import app.
  • Export app.
  • Add, change, and delete application resources.
• These permissions from App Initiators:
  • Start an app instance.
• These permissions from Report Viewers:
  • View applicattion data.

App Designers

(Permission Group)

App Designers is a permission group for users or groups who have access rights to create, change, or delete a specific app in App Builder.

App Designers can be assigned at the global level or for an individual app:

• If App Designers are assigned in Manage Center, they have access to all apps.
• If App Designers are assigned in App Builder, they have access to the individual apps where they are assigned.

An AgilePoint NX tenant can have App Designers assigned at both the global level and assigned to individual apps.

If a specific app has one or more App Designers, this permission group overrides the App Designers configured in Manage Center.

Permissions:

This permission group has these permissions for a specific app.

• View app.
• Change app.
• Save app.
• Check in or check out the app.
• Publish app.
• Rename app.
• Import app.
• Export app.
• Add, change, and delete application resources.
• These permissions from App Initiators:
  • Start an app instance.
• These permissions from Report Viewers:
  • View applicattion data.

App Initiators

(Permission Group)

App Initiators is a permission group for users or groups who have access rights to start a process-based app or form-based app.

• For process-based apps, App Initiators are also process initiators for all process models within the app.
• In a process-based app, an App Initiator must also be a participant for the ​start task to initiate an app. This means that when an App Initiator is configured at the global level in Manage Center, the App Initiator can start any app, but only if they are configured as a participant for the start task in an app.
• For form-based apps, App Initiators are simply runtime app users for the app.

App Initiators can be assigned at the global level or for an individual app:

• If App Initiators are assigned in Manage Center, they have access to all apps.
• If App Initiators are assigned in App Builder, they have access to the individual apps where they are assigned.

An AgilePoint NX tenant can have App Initiators assigned at both the global level and assigned to individual apps.

Permissions:

This permission group has these permissions for a specific app:

• Start an app instance.
• These permissions from Report Viewers:
  • View applicattion data.

Limitations:

Users and groups can only be assigned to the App Initiators permission group after an app is published.

Report Viewers

(Permission Group)

Report Viewers is a permission group for users or groups who have access rights to view the application data in an eForm report view for a specified app.

Report Viewers can be assigned at the global level or for an individual app:

• If Report Viewers are assigned in Manage Center, they have access to all apps.
• If Report Viewers are assigned in App Builder, they have access to the individual apps where they are assigned.

An AgilePoint NX tenant can have Report Viewers assigned at both the global level and assigned to individual apps.

Permissions:

This permission group has these permissions for a specific app:

• View applicattion data.

Limitations:

Users and groups can only be assigned to the Report Viewers permission group for an app after the app is published.

Global Package Owners

(Permission Group)

Global Package Owners is a permission group for users or groups who have full access rights for all packages created in App Builder. Global Package Owners can manage permission groups for all packages.

Permissions:

This permission group has these permissions for all packages in an AgilePoint NX tenant:

• Manage permission groups.
• Create package.
• Edit package.
• Delete package.
• Import package.
• Export package.
• View audit log.
• View package history.
• Deprecate a package.

Package Owners

(Permission Group)

Package Owners is a permission group for users and groups who have full access rights for a specified package in App Builder.

Package Owners for all packages in an AgilePoint NX tenant can be assigned in Manage Center. Package Owners for individual pages can be assigned in App Builder.

Permissions:

This permission group has these permissions for a specific package:

• Manage permission groups.
• Create package.
• Edit package.
• Delete package.
• Import package.
• Export package.
• View audit log.
• View package history.
• Deprecate a package.

Global Data Entities Permission Managers

(Permission Group)

Global Data Entities Permission Managers is a permission group for users or groups who have full access rights for the Data Entities component. Global Data Entities Permission Managers can manage other permission groups for the Data Entities component and for all specific entities.

Limitations:

• At least one user must belong to the Global Data Entities Permissions Managers permissions group to access the Data Entities component.

  Global Data Entities Permision Managers can add users to the Entity Designers permission group in Manage Center to access the Data Entities component, or to any entity-level permission group to access a specific entity.

Permissions:

This permission group has these permissions:

• Manage permission groups for the Data Entities component and all specific entities.
• View the audit log for all entities.
• These permissions from global level Entity Designers:
  • View an entity in Data Entities.

    This only applies to entities where the user has Entity Designer permissions or higher. An Entity Designer assigned at the level of a specific entity can not view entities where they do not have Entity Designer permissions.

  • Create custom entities.

    This permission applies only at a global level (defined in Manage Center).

  • Change custom entities.

    This applies locally or globally, depending upon the level of permission.

  • Delete custom entities.

    This applies locally or globally, depending upon the level of permission.

  • Save entity.
  • Publish entity.
  • Export entity.
  • Import entity.
  • Change entity properties.
  • Create fields.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change fields.
  • Delete fields.
  • Create relationships.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change relationships.
  • Delete relationships.
  • Create picklists.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change picklists.
  • Delete picklists.
  • Create picklist items.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change picklist items.
  • Delete picklist items.
  • Export picklists.
  • Import picklists.
• These permissions from Delete Records:
  • Delete records.
• These permissions from Create Records:
  • Create (add) records.
• These permissions from Edit Records:
  • Edit (change) records.
• These permissions from Read Records:
  • Read (view) records.

Entity Owners

(Permission Group)

Entity Owners is a permission group for users and groups who have access rights for a specific entity in Data Entities.

Entity Owners for all entities in an AgilePoint NX tenant can be assigned in Manage Center. Entity Owners for individual entities can be assigned in Data Entities.

If a specific entity has one or more Entity Owners, this permission group overrides the Entity Owners configured in Manage Center.

Permissions:

This permission group has these permissions for a specific entity:

• Manage permission groups.
• Delete custom entities.

  This applies locally or globally, depending upon the level of permission.

• These permissions from Entity Designers:
  • View an entity in Data Entities.

    This only applies to entities where the user has Entity Designer permissions or higher. An Entity Designer assigned at the level of a specific entity can not view entities where they do not have Entity Designer permissions.

  • Change custom entities.

    This applies locally or globally, depending upon the level of permission.

  • Save entity.
  • Publish entity.
  • Export entity.
  • Import entity.
  • Change entity properties.
  • Create fields.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change fields.
  • Delete fields.
  • Create relationships.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change relationships.
  • Delete relationships.
  • Create picklists.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change picklists.
  • Delete picklists.
  • Create picklist items.

    This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

  • Change picklist items.
  • Delete picklist items.
  • Export picklists.
  • Import picklists.
  • View the audit log for an entity.
• These permissions from Delete Records:
  • Delete records.
• These permissions from Create Records:
  • Create (add) records.
• These permissions from Edit Records:
  • Edit (change) records.
• These permissions from Read Records:
  • Read (view) records.

Entity Designers

(Permission Group)

Entity Designers configured in Data Entities is a permission group for users or groups who have access rights to change specific entities.

Entity Designers can be assigned at the global level or for an individual entity:

• If Entity Designers are assigned in Manage Center, they have access to all entities.
• If Entity Designers are assigned in Page Builder, they have access to the individual entities where they are assigned.

An AgilePoint NX tenant can have Entity Designers assigned at both the global level and assigned to individual entities.

If a specific entity has one or more Entity Designers, this permission group overrides the Entity Designers configured in Manage Center.

Permissions:

Entity Designers have these permissions:

• View an entity in Data Entities.

  This only applies to entities where the user has Entity Designer permissions or higher. An Entity Designer assigned at the level of a specific entity can not view entities where they do not have Entity Designer permissions.

• Change custom entities.

  This applies locally or globally, depending upon the level of permission.

• Save entity.
• Publish entity.
• Export entity.
• Import entity.
• Change entity properties.
• Create fields.

  This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

• Change fields.
• Delete fields.
• Create relationships.

  This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

• Change relationships.
• Delete relationships.
• Create picklists.

  This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

• Change picklists.
• Delete picklists.
• Create picklist items.

  This may apply to standard (out-of-the-box) entities or custom entities, or locally or globally, depending upon the level at which the permissions are assigned.

• Change picklist items.
• Delete picklist items.
• Export picklists.
• Import picklists.
• These permissions from Delete Records:
  • Delete records.
• These permissions from Create Records:
  • Create (add) records.
• These permissions from Edit Records:
  • Edit (change) records.
• These permissions from Read Records:
  • Read (view) records.

Read Records

(Permission Group)

Read Records is a permission group for users and groups who have access rights to read records for a specific entity in Data Entities.

Permissions for entity records (Read, Edit, Create, Delete Records) apply only to the records for a specified entity at runtime. Users with these permissions can not access the entity in Data Entities at design time unless they also have Entity Designers or higher level permissions for the entity.

Permissions:

This permission group has these permissions for a specific entity:

• Read (view) records.

Edit Records

(Permission Group)

Edit Records is a permission group for users and groups who have access rights to change and read records for a specific entity in Data Entities.

Permissions for entity records (Read, Edit, Create, Delete Records) apply only to the records for a specified entity at runtime. Users with these permissions can not access the entity in Data Entities at design time unless they also have Entity Designers or higher level permissions for the entity.

Permissions:

This permission group has these permissions for a specific entity:

• Edit (change) records.
• These permissions from Read Records:
  • Read (view) records.

Create Records

(Permission Group)

Create Records is a permission group for users and groups who have access rights to create, change, and read records for a specific entity in Data Entities.

Permissions for entity records (Read, Edit, Create, Delete Records) apply only to the records for a specified entity at runtime. Users with these permissions can not access the entity in Data Entities at design time unless they also have Entity Designers or higher level permissions for the entity.

Permissions:

This permission group has these permissions for a specific entity:

• Create (add) records.
• These permissions from Edit Records:
  • Edit (change) records.
• These permissions from Read Records:
  • Read (view) records.

Delete Records

(Permission Group)

Delete Records is a permission group for users and groups who have access rights to delete, create, change, and read records for a specific entity in Data Entities.

Permissions for entity records (Read, Edit, Create, Delete Records) apply only to the records for a specified entity at runtime. Users with these permissions can not access the entity in Data Entities at design time unless they also have Entity Designers or higher level permissions for the entity.

Permissions:

This permission group has these permissions for a specific entity:

• Delete records.
• These permissions from Create Records:
  • Create (add) records.
• These permissions from Edit Records:
  • Edit (change) records.
• These permissions from Read Records:
  • Read (view) records.

Analytics

(Permission Group)

Analytics is a permission group associated with roles to use an entity in reports and dashboards in Analytics Center.

Analytics is different from other permission groups:

• Even though the Analytics permission group is managed in the Data Entities component for specific entities, it allows data from the entity to be used in Analytics Center.
• Most permission groups are associated with users and groups. The Analytics permission group is associated with roles that are configured in Manage Center.
• AgilePoint roles in Manage Center are assigned a role (as a collection of access rights) in the Analytics component. When you select a role in the Analytics permission group, the Analytics permissions that are assigned are associated with the Analytics role that is associated with the AgilePoint role.

Permissions:

This permission group has these permissions for a specific entity:

• Use the entity in reports and dashboards in Analytics Center. The permissions depend upon the Analytics role that is associated with the specified AgilePoint role.

Global Page Builder Permission Managers

(Permission Group)

Global Page Builder Permission Managers is a permission group for users or groups who have full access rights for the Page Builder component. Global Page Builder Permission Managers can manage other permission groups for the Page Builder component and for all specific custom pages.

Limitations:

• At least one user must belong to the Global Page Builder Permissions Managers permission group to access the Page Builder component.

  Global Page Builder Permission Managers can add users to the Page Designers permission group in Manage Center to access the Page Builder component, or to any page-level permission group to access a specific page.

Permissions:

This permission group has these permissions:

• Manage permission groups for the Page Builder component and all specific pages.
• View the audit log for all pages.
• These permissions from global level Page Designers:
  • View a page in Page Builder.

    This only applies to pages where the user has Page Designer permissions or higher. A Page Designer assigned at the level of a specific page can not view pages where they do not have Page Designer permissions.

  • Create custom pages.
  • Check out and check in pages on behalf of other users.
  • Delete page.
  • Preview page.
  • Edit page.
  • Create or change menus.
  • Add or change custom CSS.
  • Save page.
  • Publish page.
  • Check in and check out page.
  • Roll back page version.
  • Import page.
  • Export page.
  • View the audit log for a custom page.
• These permissions from Page Viewers:
  • View page.

Page Owners

(Permission Group)

Page Owners is a permission group for users and groups who have full access rights for a custom page in Page Builder.

If a custom page has one or more Page Owners, this permission group overrides the Page Owners configured in Manage Center.

Permissions:

This permission group has these permissions for a specific custom page:

• Manage permission groups.
• Check out and check in pages on behalf of other users.
• Delete page.
• View the audit log for a custom page.
• These permissions from Page Designers:
  • View a page in Page Builder.

    This only applies to pages where the user has Page Designer permissions or higher. A Page Designer assigned at the level of a specific page can not view pages where they do not have Page Designer permissions.

  • Preview page.
  • Edit page.
  • Create or change menus.
  • Add or change custom CSS.
  • Save page.
  • Publish page.
  • Check in and check out page.
  • Roll back page version.
  • Import page.
  • Export page.
• These permissions from Page Viewers:
  • View page.

Page Designers

(Permission Group)

Page Designers configured in Page Builder is a permission group for users or groups who have access rights to change specific pages.

Page Designers can be assigned at the global level or for an individual custom page:

• If Page Designers are assigned in Manage Center, they have access to all pages.
• If Page Designers are assigned in Page Builder, they have access to the individual pages where they are assigned.

An AgilePoint NX tenant can have Page Designers assigned at both the global level and assigned to individual pages.

If a custom page has one or more Page Designers, this permission group overrides the Page Designers configured in Manage Center.

Permissions:

Page Designers have these permissions:

• View a page in Page Builder.

  This only applies to pages where the user has Page Designer permissions or higher. A Page Designer assigned at the level of a specific page can not view pages where they do not have Page Designer permissions.

• Create custom pages.
• Check out and check in pages on behalf of other users.
• Delete page.
• Preview page.
• Edit page.
• Create or change menus.
• Add or change custom CSS.
• Save page.
• Publish page.
• Check in and check out page.
• Roll back page version.
• Import page.
• Export page.
• These permissions from Page Viewers:
  • View page.

Page Viewers

(Permission Group)

Page Viewers is a permission group for users or groups who have access rights to see a custom page, but can not add or delete the page, in Page Builder.

Permissions:

This permission group has these permissions for a specific custom page:

• View page.