Tuning authorization performance for Process Portal

Draft comment:
This topic only applies to BAW, and is located in the BAW repository. Last updated on 2025-03-13 12:15
Authorization for many actions in REST API-based clients, such as Process Portal, is determined by the security groups and teams that a user belongs to. If users belong to many (thousands of) security groups and teams, they might experience performance issues because of frequent authorization lookups. You can improve the performance in such situations by restricting authorization lookups to the groups and teams that are relevant in a specific context.

About this task

Property Default Description
optimize-group-membership-lookups true Optimizes the authorization lookups that impact both user actions, such as claiming tasks, and system actions, such as refreshing the task list in the Work dashboard. To enable the improved performance, the property is by default set to true. It is not recommended to set it to false.
Use the following XML snippet to make the configuration change in the 100Custom.xml file:
<common>
   <security>
      <optimize-group-membership-lookups merge="replace">true</optimize-group-membership-lookups>
   </security>
</common>

For information about making and deploying 100Custom.xml configuration changes, see Creating a 100Custom.xml configuration file.