Authorization control for runtime REST API calls

Use authorization roles and action policies to enable users for specific actions on workflow entities such as tasks, processes, users, groups, and teams.