Configuring access control lists

You can configure the task by using an access control list (ACL). When an ACL is specified, it is important to understand that only the assigned user or group can perform the selected task activities. Permissions must be configured for each user. You can delete permissions for a user when you no longer need them.

The following permissions can be assigned as part of the ACL:

Claim: Specifies whether a user can claim the task. When users have this permission, they can claim a task from another users queue.

Forward: Specifies whether the user who is assigned the task can forward it to another user.

Consult: Specifies whether the user can consult the task. When you consult a task, it is very much like forwarding the task; however, the user who you consult with cannot complete the task. The user is further restricted and can only render the form, submit data on the form, save the form data, add attachments and notes, or return the form to the user who consulted the task. The user who consulted the task can complete the task after it is returned from the user who they consulted their task with.

Share: Specifies whether the user can share the task. When a task is shared, the original permissions are enforced, and the user you share the task with can claim the task as their own.

Add Attachments: Specifies whether the user can add new attachments to the task. In addition, the user can set read, modify, and delete rights on each attachment that is added to the task.

Add Notes: Specifies whether the user can add notes to the task. In addition, the user can specify read, modify, and delete rights on each individual note that is added to the task.

Modify Permissions: Specifies whether the user can modify existing permissions on the task. This functionality is currently not available in Workspace ES.

Add ACL For Shared Queue: Specifies to add permissions for other users who have shared queue access to the assigned user's queue.

Caution: If Add ACL For Shared Queue option is selected, users can see or claim all tasks from another user's queue. You will want to deselect this option for tasks you want to remain confidential. You will want to select this option to allow others to see your list of tasks that are not confidential. For example, processes may request confidential information about a person such a social security number. In this situation, you will not want to select Add ACL For Shared Queue, otherwise, others will be able to see the confidential information in the task.

The default ACL provided should be suitable for most design scenarios that include the Add Attachments, Forward, and Add Notes permissions. The default ACL appears as an entry in the table in the Task Access Control List (ACL) called <Default ACL>.

The default ACL is used for the originally assigned user if no ACL is defined for that user in the Assign Task operation. The default ACL is also used as the ACL for users who have the task assigned to them and do not have an ACL defined for that task.

To add a user profile to the access control list:

Select the Assign Task operation in the process diagram and, in the Properties view, click the Task Access Control List (ACL) category, and then click Add.
In the Select User dialog box, click Find and select a user profile, click Add, and then click OK. In the table under Task ACLs, the user profile appears. If you select that user, the default ACLs Add Attachments, Forward, and Add Notes permissions are selected.
Select and deselect any permissions for that user profile.

To change permissions for an existing user profile or the default ACL in the access control list:

Select the Assign Task operation in the process diagram and, in the Properties view, click the Task Access Control List (ACL) category.
In the Properties view, in the table under Task ACLs, select the user profile or <Default ACL>.
Select and deselect permissions for that user profile.

To delete a user from the access control list:

Select the user profile and click Delete.

Configuring access control lists

To add a user profile to the access control list:

To change permissions for an existing user profile or the default ACL in the access control list:

To delete a user from the access control list:

See also