You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/2025.3/Guides/user-guides/user-interfaces/gateway/Admin/studio-authorisation.md
+29-14Lines changed: 29 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,15 +1,15 @@
1
1
---
2
2
title: "Studio Authorisation"
3
3
linkTitle: "Studio Authorisation"
4
-
description: "Manage the authorisation for access to flows in {{% ctx %}} Gateway."
4
+
description: "Configure access to flows in {{% ctx %}} Gateway."
5
5
weight: 50
6
6
---
7
7
8
8
# {{% param title %}}
9
9
10
10
## Summary
11
11
12
-
The Studio Authorisation page is used to manage the authorisation for access to flows within {{% ctx %}} Gateway. Each flow can be set to have [View][] or [Edit][] permissions assigned to LDAP Groups, or no access permissions at all.
12
+
The Studio Authorisation page is used to configure access to flows within {{% ctx %}} Gateway. Each flow can be set to have [View][] or [Edit][] permissions assigned to LDAP Groups that exist in the Active Directory server configured in LDAP Connection for CORTEX Gateway, or no access permissions at all.
The LDAP Groups that may be granted access are limited to those assigned the Studio role in LDAP Authorisation.
22
+
The LDAP Groups that may be granted access are limited to those assigned the `Studio` role in LDAP Authorisation.
23
23
24
24
Permissions are set either explicitly or implicitly. Explicitly set permissions are assigned by the user performing an explicit action to set that item’s permissions, whereas implicitly set permissions are assigned automatically by the user explicitly setting the permissions on a parent group.
25
25
26
-
Permissions are explicitly set by setting the checkbox in either the [View][] or [Edit][] columns of the appropriate LDAP Group where it intersects with the flow or flow Group to which the permissions are to be assigned. Permissions are explicitly removed by clearing the checkbox.
26
+
Permissions are explicitly set by setting the checkbox in either the [View][] or [Edit][] columns of the appropriate LDAP Group for the flow or group to which the permissions are to be assigned. Permissions are explicitly removed by clearing the checkbox.
27
27
28
28
If an item is explicitly set with [Edit][] permissions, then that item will also be implicitly set with [View][] permissions. Explicitly setting an item with [View][] permissions does not implicitly set it with Edit permissions.
29
29
@@ -34,13 +34,16 @@ If an item is explicitly set with [Edit][] permissions, then that item will also
34
34
If an LDAP group is given `View` permissions on a flow, the members of the LDAP group can:
35
35
36
36
* View the flow
37
-
*Execute the flow
37
+
*Debug the flow
38
38
39
-
If an LDAP Group is given `View`only permissions on a flow group, the members of that LDAP group can only access existing flows and flow groups within that flow group.
39
+
If an LDAP Group is given `View` permissions on a group, the members of that LDAP group can:
40
40
41
-
If a flow group has `View` permissions either explicitly set or implicitly set, then its child flow groups or flows will have their `View` permissions be implicitly set.
41
+
* View all descendent groups and flows
42
+
* Debug all descendent flows
42
43
43
-
If a flow group has its `View` permissions removed, then all its child flow groups or flows will have their `View` permissions removed, regardless of whether they were set explicitly or implicitly.
44
+
If a group has `View` permissions either explicitly set or implicitly set, then its child groups and flows will have their `View` permissions implicitly set.
45
+
46
+
If a group has its `View` permissions removed, then all its child groups and flows will have their `View` permissions removed, regardless of whether they were set explicitly or implicitly.
44
47
45
48
See the [Manage Flow Access][Manage Flow Access tutorial] tutorial for a step-by-step guide.
46
49
@@ -49,27 +52,39 @@ See the [Manage Flow Access][Manage Flow Access tutorial] tutorial for a step-by
49
52
If an LDAP group is given `Edit` permissions on a flow, the members of the LDAP group can:
50
53
51
54
* View the flow
52
-
*Execute the flow
55
+
*Debug the flow
53
56
* Edit the flow
57
+
* Move the flow
58
+
* Rename the flow
54
59
* Delete the flow
55
60
* Commit changes to the flow
56
61
* Get the master version of the flow
57
62
58
-
If an LDAP Group is given `Edit` permissions on a flow group, the members of that LDAP group can create new flows and groups within that flow group.
63
+
If an LDAP Group is given `Edit` permissions on a group, the members of that LDAP group can:
64
+
65
+
* Create new flows and groups within the group
66
+
* View all descendent flows and groups
67
+
* Debug all descendent flows
68
+
* Edit all descendent flows
69
+
* Move all descendent flows
70
+
* Rename all descendent flows
71
+
* Delete all descendent flows
72
+
* Commit changes to all descendent flows
73
+
* Get the master version of all descendent flows
59
74
60
-
If a flow group has `Edit` permissions explicitly set, then its child flow groups or flows will be implicitly set with both `Edit` and [`View`][View] permissions.
75
+
If a group has `Edit` permissions explicitly set, then its child groups and flows will be implicitly set with both `Edit` and [`View`][View] permissions.
61
76
62
-
If a flow group has its `Edit` permissions removed, then all its child flow groups or flows will have their `Edit` permissions removed, regardless of whether they were set explicitly or implicitly.
77
+
If a group has its `Edit` permissions removed, then all its child groups and flows will have their `Edit` permissions removed, regardless of whether they were set explicitly or implicitly.
63
78
64
-
If a flow is explicitly set with `Edit` permissions, then any parent Groups, which have not been explicitly set with [`View`][View] permissions, will be also implicitly set with [`View`][View] permissions.
79
+
If a flow is explicitly set with `Edit` permissions, then any parent groups, which have not been explicitly set with [`View`][View] permissions, will be implicitly set with [`View`][View] permissions.
65
80
66
81
See the [Manage Flow Access][Manage Flow Access tutorial] tutorial for a step-by-step guide.
67
82
68
83
## Remarks
69
84
70
85
### Known Limitations
71
86
72
-
*If a flow group is explicitly set Edit permissions, then the Groups View permissions will be implicitly set. However, if the explicitly set Edit permissions are removed from the Group, the implicitly set View permissions are not removed.
87
+
*The state of whether a permission is granted explicitly or implicitly is not persisted between the page being closed and reopened.
Only flows that the user has Edit permissions for are displayed.
18
+
Only flows with `Edit` permissions for the current user are displayed in the Studio Hierarchy grid.
19
19
20
20
## Actions
21
21
22
22
### Move Flows
23
23
24
-
After selecting the flows that are to be moved to a unique location in Group hierarchy, Right-Click on the target Group to where the selected flows will be moved to, and select the `Move selected items to this Group` from the context menu. The display will be updated to show the resultant hierarchy, with the flows to be moved but not yet committed identified with an asterisk (*) in the Results column of the display.
24
+
After selecting the flows that are to be moved, right-click on the group where the selected flows will be moved to, and select the `Move selected items to this Group` from the context menu. The display will be updated to show the resultant hierarchy, with the flows to be moved but not yet committed identified with an asterisk (*) in the `Results` column of the grid.
25
25
26
-
If a Group is selected, then only the flows contained in that selected group are moved to another group; not the group itself.
26
+
If a group is selected, then only the flows contained in that group are moved to another group; not the group itself.
27
27
28
-
See the [Manage Flow Hierarchy][Manage Flow Hierarchy tutorial] tutorial for a step-by-step guide.
29
-
30
-
### Commit Changes
31
-
32
-
Once all the necessary flows have been moved in the hierarchy, all the changes can be committed using the Commit button.
28
+
Once all the necessary flows have been moved, the changes can be committed using the `Commit` button.
33
29
34
30
See the [Manage Flow Hierarchy][Manage Flow Hierarchy tutorial] tutorial for a step-by-step guide.
35
31
36
32
## Remarks
37
33
38
34
### Known Limitations
39
35
40
-
*It is necessary for the parent Groups to have Edit permissions in addition to the flows to be moved, to enable the display of the flows in Studio Hierarchy.
36
+
*Parent groups must also have edit permissions, in addition to the flows, otherwise the group and flows contained within it will not be displayed.
0 commit comments