Library Tab › Mapping for Object Properties Tabs › Object Properties: Runtime Security Tab (Process objects)

Object Properties: Runtime Security Tab (Process objects)

The Runtime Security controls ensure that users without proper permissions cannot start a process.

Runtime Security

Specifies whether to enable or disable the runtime security explicitly or through an inheritance option.

Note: When you explicitly enable or disable the run-time security, changes to inherited settings have no impact.

Values:

• Inherit from Orchestrator: The process object inherits security settings from the Orchestrator.
• Enable: The product verifies user permissions before accessing automation objects from the database. After you enable the run-time security, the product uses enforcement when a process starts.
• Disable: The product ensures backward compatibility for existing processes during, for example, system upgrades. The processes run as they did before this release.

Default: Inherit from Orchestrator

Run as Owner

Specifies whether to run processes with the permissions of either the process owner or the user who started the process instance. This check box is active only when you set the Runtime Security property to Enabled or Inherit from Orchestrator. Only Environment Content Administrators or the process owner can select this check box.

Values:

• Selected: The current identity is the process owner. The product enforces an access control list for the process owner, regardless of who started the process. The product loads private copies of the process and the owner-created objects.
• Cleared: The current identity is the user who started the process. The product verifies the user permissions.

Default: Cleared

Enable Operator Recovery

Specifies whether to automate the operator recovery. This option applies to process objects only. Recovery applies to specific operators that fail with a SYSTEM_ERROR. Operators subject to recovery must be part of processes that are in a Blocked, Running, or Waiting state.

Values:

• Selected: Recovery starts running the affected processes. The operators that target the proxy touchpoint run.
• Cleared: Operator recovery is disabled.

Default: Selected