Kapplets user management

The Kofax RPA Kapplets security model is role-based. Users must have certain access rights to the repository within the Management Console project and certain privileges in the Kofax RPA Kapplets to manage Kapplets, templates, schedules, and workspaces.

For example, if you are assigned the Kapplet User role in the Management Console, in the Kapplets interface, even if you have an Administrator privilege, you can only run Kapplets. To create templates, however, you must be assigned the Kapplet Administrator role. These two roles limit the access to the Management Console repository.

Users log in to Kofax RPA Kapplets using Management Console by entering their credentials configured in Management Console. First, an administrator needs to create users and groups and assign permissions in projects in Management Console. Thus, users that later work in Kofax RPA Kapplets get certain rights to access the repository within the Management Console projects that contain robots, types, and more.

For these users, the two user roles are available:

If a Kapplet contains at least one robot belonging to a project that you do not have access rights for, it is shown with a warning icon and a tooltip stating that this Kapplet is disabled. In other words, to run a Kapplet, you must have the rights for all the projects containing these robots, and the robots must exist in the Management Console repository.

Administrators must use this procedure to configure users, groups, and project permissions in Management Console:

1. Log in to Management Console as administrator and create users and groups. Add users to groups.

2. In the Projects section, create a project (or edit an existing one) and on the Permissions tab, assign a project role for the security group.

   Select Kapplet Administrator or Kapplet User.

   See also Projects and Users & groups.

Kapplets are built and maintained by users depending on their privileges, which are assigned and changed by the global administrator on the Kapplets side. After users are created in the Management Console, the administrator should assign global and custom privileges to users and groups.

Administrators must log in to Kapplets as the superuser (default name: admin, password: admin) through the Management Console and perform one of these options:

• Ask the users to log in to Kapplets first. The data on these users and their groups is synchronized between Management Console and Kapplets.

  When new users log in to Kapplets, access is denied, however, new user accounts are created in Kapplets.

  For these users, an administrator can assign appropriate privileges, and the users can then work in Kapplets.

• Go to the User groups page, click the plus sign in the upper left corner and create groups with exactly the same names as the groups in Management Console.

  Assign privileges to each of the groups you created.

These two types of privileges are available in Kapplets:

• Global privileges: Managed at the system-wide level and can be assigned to an individual user or to a group of users, where each user inherits the privilege.

  Privilege	Description
  None	Has no access to the Kapplets application.
  User	Runs Kapplets, can create schedules for these Kapplets and view only the results of the created schedules.
  Developer	Creates, runs, edits, and deletes Kapplets and templates. Can create schedules and view the results of all schedules created by any user.
  Administrator	Manages Kapplets, templates, and workspaces, creates schedules. Can view the results of all schedules created by any user. Assigns privileges.

• Custom privileges: Assigned only to the user groups of a certain workspace; users inherit these privileges from the user group.

If different privileges are granted to the user and the group where this user belongs, the user gets the most expanded privilege.

The following are examples of combination of roles and privileges that users must have to work in Kapplets.

To run an existing Kapplet, users must:

• In Management Console, have the Kapplet User role on the project that contains robots used in this Kapplet.

• In Kapplets, have at least the User global privilege.

To create templates, users must:

• In Management Console, have the Kapplet Administrator role on the project that contains the robots used in the Kapplet.

• In Kapplets, have at least the Developer global privilege.

See Users and User Groups for more information.