Skip to main content
Version: 8.8 (unreleased)

Access Control

If authorization checks are enabled for your Orchestration Cluster, users need authorizations as described in this section to work with Tasklist. You can assign those in the Identity UI. See the introduction to authorizations for an overview of all available authorizations.

Mandatory authorizations​

  • Component access for Tasklist:
    • Resource type: Component
    • Resource id: tasklist or * (for access to all web components)
    • Permission: ACCESS
  • Read user tasks
    • Resource type: Process Definition
    • Resource id: ID of the respective BPMN process definition or * (for all process definitions)
    • Permission: READ_USER_TASK

Optional authorizations​

  • Assign and complete user tasks
    • Resource type: Process Definition
    • Resource id: ID of the respective BPMN process definition or * (for all process definitions)
    • Permission: UPDATE_USER_TASK
  • View BPMN diagrams
    • Resource type: Process Definition
    • Resource id: ID of the respective BPMN process definition or * (for all process definitions)
    • Permission: READ_PROCESS_DEFINITION