We have a requirement where business users need to test and validate Decision Table conditions directly from the Run button in the Delegation Portal.
We understand that the recommended best practice is to provide business users with only update and save access. However, our business requirement requires them to execute (Run) the delegated Decision Tables for validation purposes.
Current situation:
The Run button is enabled on the Delegation Portal.
Additional access/privileges have been granted to the business users.
Despite this, users still receive an “Unauthorized” error when attempting to run the Decision Table.
Our questions are:
Is it supported for delegated business users to execute Decision Tables using the Run functionality from the Delegation Portal?
If yes, what are the exact roles, access groups, privileges, or permissions required to enable this functionality successfully?
Are there any specific security restrictions or configuration settings that need to be updated to avoid the Unauthorized error?
Any guidance on the required permissions and configuration would be appreciated.
The business wants the ability to run delegated rules. For this, we need to provide an option in the Actions tab, similar to what is available in Dev Studio.
We have developed a custom user portal where the landing page harness is pzDelegatedRules (Data-Portal), and all delegated rules are displayed on this page.
Note: We are not using Case Manager. Instead, we have built our own custom portal, so the solution should be implemented specifically for this custom portal setup.
I’d recommend using Configuration Sets rather than granting access directly to Decision Tables. Configuration Sets provide a more maintainable and governed approach for managing business configuration, and they also make it easier to build unit tests around your decision logic.
If you choose to continue with the current approach, you’ll need to investigate the Rule-Decision-Table execution path, identify the required activities and privileges, and grant them to the appropriate access groups. While possible, this can become difficult to maintain over time.
From a best-practice perspective, Configuration Sets would be the preferred solution.