Case management security

Draft comment:
This topic only applies to BAW, and is located in the BAW repository. Last updated on 2025-03-13 12:15

You manage the security for case management with users and groups that you configure in your Lightweight Directory Access Protocol (LDAP) repository and apply throughout the system. You must plan for different groups of users and different permission levels for your design environment and your production environment.

You can use users and groups that exist in your directory server for IBM® Business Automation Workflow permissions. You can also create new users and groups.

Restriction: To prevent problems when Active Directory users log in, use the same full name, samAccountName, and display name when you create users.

It is a best practice to keep security considerations in mind during all phases of the IBM Business Automation Workflow life cycle:

Before you install your prerequisite software: If possible, decide which users and groups to configure. If you are installing IBM Business Automation Workflow with an existing IBM Content Cortex environment, plan and add your users and groups before you configure the IBM Content Cortex system to work with IBM Business Automation Workflow.
During installation and configuration of IBM Business Automation Workflow: Plan for administrator roles and access to the system. Before you create the case management object stores, create a master group for users that you can assign at creation. This enables you to add users to the master group without changing the users on the object store.
During solution design: Create a plan for which case objects should be accessible to which case workers. When your solution is deployed, you can use the plan to configure appropriate security. If the security requirements change for your case solution, you can update the solution configuration and apply it to the solution.