Managing Security in Process Automation

Laserfiche Account Administration is your first step towards preparing your Laserfiche system. It is your first stop to configuring user accounts for authentication into the various Laserfiche services.

Upon joining Laserfiche Cloud, you will receive the following pieces of information:

• Account ID
• Administrator user name
• Administrator password

Use these credentials to sign in to Process Automation and create users.

Process Automation Security Roles

You can assign the following roles to users, either explicitly or by inheritance, to grant them the appropriate rights to Process Automation.

Process Administrator

• Has full access to Process Automation, including full administrative rights.

Process Developer

This role grants rights to create and modify processes.

• Can create and modify workflows, rules, starting events, business processes, and entities.
• Can access files in Files.

Process Manager

This role provides a general view of processes but does not let you create or modify processes.

• Can view all business processes and workflow instances.
• Can start business processes and update business process instances.
• Can modify rules and settings.
• Cannot create or modify a process.
• Cannot view workflow designs or run workflows.
• Can create, view or modify teams, but can delete only teams created by themselves.

Process Asset Administrator

• Can administer assets in Process Automation.
  • Assets include files, holidays, profiles, repository contents, and work schedules.
• Can view teams, but cannot edit or create them.

Form Developer

This role is suitable for users who need to create surveys, including rules that may be used in the surveys.

• Can create surveys.
• Has full administrative rights over all surveys.
• Can view and run rules.

To manage access to the Process Automation site:

1. Visit https://signin.laserfiche.com/.
2. Sign in using your account ID and administrator user name and password.
3. Select the User tab.
4. Select an existing user.
5. Under Access Rights, open the Process Automation drop-down.
6. Under Access to Process Automation, select whether you want to:
   • Explicitly Allow the user to access Process Automation.
   • Let the user Inherit access to Process Automation based on their group membership
   • Explicitly Deny the user access to Process Automation.

   Important: If, in the next step, you plan to grant a user any of the Process Automation roles, the user must either be explicitly allowed access to Process Automation in this step, or must inherit access through their group membership.

7. Choose what kind of access the user has to the roles described earlier.
8. Click Create.