Access Control

General
1

Hi All,

Please, I need some clarifications on the following questions:

  1. An application includes three case types. A business requirements states that members of the App:Users access role cannot run reports for one of the case types.
    Which configuration can you apply to satisfy this requirement?
  • A. Use an Access When record to verify that the user role has access to the Run reports action.
  • B. Use an Access When record to verify that the case type has access to the Run reports action.
  • C. Use an automation to verify that the user does not have the App:Users access role.
  • D. Use an Access Deny record to set the Run reports action to No Access.

A requirement states that the Manager role cannot open a purchase request during the Audit stage. How do you configure the case stage to satisfy this requirement?

A. Apply an Access Deny record.

B. Apply an Access When record.

C. Apply a When record.

D. Apply a Privilege record.

Consider the following requirement: Car dealers cannot modify orders in the Fulfillment stage.
Which security solution do you use to satisfy the requirement?

  • A. Access of Role to Object
  • B. Access Deny
  • C. Access When
  • D. Access group

Iam looking forward to your explanations to help improve my understanding of the concept.

Kind Regards,

Arnold

2

@ArnoldG16957468

  1. An application includes three case types. A business requirement states that members of the App:Users access role cannot run reports for one of the case types. Which configuration can you apply to satisfy this requirement?

D. Use an Access Deny record to set the Run reports action to No Access.
(or also you can use access control policy to that particular work class that will restrict the operation that you define, based on the when rule that you define)

  1. A requirement states that the Manager role cannot open a purchase request during the Audit stage. How do you configure the case stage to satisfy this requirement?

C. Apply a When record.
(you can use when rule in the skip stage option in the left menu of the stage configuration this will skip the stage based on the when rule that you define)

3.Consider the following requirement: Car dealers cannot modify orders in the Fulfillment stage. Which security solution do you use to satisfy the requirement?

for this if you just want the users not to modify the property that are present in the stage you mentioned, I think ARO might help you.
But instead, if you don’t want the user to have access to the stage itself then i would suggest you use the same skip stage configuration that I suggested for your 2nd requirement.

Thank you !

3

@Manojkumar_ J

Thanks. I appreciate it!