Kapplets user management
The RPA Kapplets security model is role and privilege based. After users and groups are created by an administrator in the Management Console, the global administrator assigns roles and privileges to them. See Projects and Users and User Groups.
To manage Kapplets, templates, schedules, and workspaces, users must have access rights to the repository within the Management Console project and roles and privileges in Kapplets.
-
Users log in to Kapplets using Management Console by entering their credentials configured in Management Console.
-
Users who work in Kapplets are granted rights to access the repository within the Management Console projects that contain robots, types, and more.
-
To run a Kapplet, a user must have the access rights for all the projects containing these robots, and the robots must exist in the Management Console repository.
-
If a Kapplet contains at least one robot belonging to a project that a user does not have access rights for, it is shown with a warning icon and a tooltip stating that the Kapplet is disabled.
To manage users, see:
Roles and privileges
Kapplets are built and maintained by users depending on their roles and privileges, which are assigned and changed by the global administrator.
The following are examples of granting roles and privileges to users who work with Kapplets.
-
To run an existing Kapplet, users must:
-
In Management Console, be assigned the Kapplet User role on the project that contains robots used in the Kapplet.
-
In Kapplets, be assigned a minimum of the User global privilege.
-
-
To create templates, users must:
-
In Management Console, be assigned the Kapplet User role on the project that contains robots used in the Kapplet.
-
In Kapplets, be assigned a minimum of the User global privilege.
-
See the following:
Roles
|
Role |
Description |
|---|---|
|
Kapplet User |
Users with this role have read-only access to projects in Management Console from Kapplets. In Kapplets, users with this role can only view and run Kapplets for robots belonging to the projects for which they have access. |
|
Kapplet Administrator |
Users with this role have read access to projects in Management Console from Kapplets. In Kapplets, users with this role have read and write access to workspaces. Kapplet Administrators can manage Kapplets and create and manage Kapplet templates for the projects that contain robots required for these templates. |
Privileges
If different privileges are assigned to the user and the group where the user belongs, the user gets the expanded privilege.
-
Global privileges: Managed at the system-wide level and assigned to an individual user or to a group of users, where each user inherits the privilege.
Privilege
Description
None
Has no access to the Kapplets application.
User
Runs Kapplets and creates schedules for these Kapplets.
Views only the results of the created schedules.
Developer
Creates, runs, edits, and deletes Kapplets and templates.
Create schedules.
Views the results of all schedules created by any user.
Administrator
Manages Kapplets, templates, and workspaces.
Creates schedules.
Assigns privileges.
Views results of all schedules created by any user.
-
Custom privileges: Assigned only to the user groups for a certain workspace. Users inherit these privileges from the user group.
Assign roles
Administrators must first configure users, groups, and project permissions in Management Console. Then a global administrator assigns privileges. The roles limit the access to the Management Console repository.
To grant users permission to run existing Kapplets:
-
Log in to Management Console as administrator and create users and groups.
-
Add users to groups.
-
In the Projects section, either create a project or edit an existing one, and on the Permissions tab, select a project role for the security group.
-
To allow the user to run Kapplets, select the Kapplet User role.
In the Kapplets interface, even if the user has an Administrator privilege, the user can only run Kapplets.
-
To allow the user to create templates, select the Kapplet Administrator role.
-
- Assign privileges.
Assign privileges
Global administrator access is required to assign privileges.
-
Log in to Kapplets as the superuser (default name: admin, password: admin) through the Management Console.
-
Do one of the following:
-
Ask the new users to log in to Kapplets.
When new users log in to Kapplets, access is denied but the new user accounts are created automatically in Kapplets. Then data on these users and their groups is synchronized between Management Console and Kapplets.
-
Go to the User groups page, click the plus sign, and create groups with exactly the same names as the groups in Management Console.
-
-
Assign privileges to each of the users or groups you created.