Question
Difference between Privilege & Access of Role to Object
Hi Team,
I have checked in PDN on these two topics but still I have some confusion (in Previlege we will mention access roles and again in ARO we will mention previlege).
how these two topics related each other. how can we restrict access for some users. could you please give a brief then it will clear my confusion. Thanks.
Accepted Solution
Your confusion is coming from Roles tab in Privilege rule. Basically we don't mention Access Role in privilege, it's just showing the references (showing all the access roles where this privilege is mentioned).
Hope this clears your confusion
Access Role controls all the security for group of users (Access Group) and contains all the privileges.
These privileges can be defined in some rule types e.x. Flow Action. All the users which have that privilege (which have that Access Group) will be able to perform that Flow Action.
Operator maps to Access Group
Access Group contain Access Roles
Each Access Role contains ARO which have privileges
If we understand privileges as permissions then using ARO we can add specific permissions to any class or rule. As a best practice you can use 'Access Manager' landing page to control access to rules.
Basically both the rules are meant for authorization.