We are in need of creating a read only developer access to Designer Studio. This is mainly needed for Developer to have access in Production environment to triage any production issue. As a part of this requirement, we came up with Access Role restricting the user updating his own operator profile and then restricting with private edit, check out of any rules, Clipboard update etc.
We want to further restrict user running/executing any rules especially Activity rule type. Need help in achieving this with adding any Access Role of Object or any OOTB privileges or any other way that you think of.
***Edited by moderator, Maryrita: moved to Product Support from Applications***
***Edited by Moderator Marissa to update categories***
i think you can create new role for that production and in that rule you can crate ARO for Rule- with only execute activities privilege as 5.rest you can ignore or give 0 privilege.I hope this will work. If you need only for activity rules create ARO for Rule-Obj-Activity.
Adding Rule- with only execute activities privilege as 5 will not work as it does not allow to launch the designer studio itself. Rule- we need to have Read rule/instances privilege as well.
And adding Rule-Obj-Activity with execute privilege access won't restrict from running any activities. We might need to adjust this by disabling the run button in Actions menu on different rule types. Your Thoughts