Process Portal dashboards: Authorization overview

Process Portal includes a Process Performance and a Team Performance dashboard. Users must be authorized to access the dashboards and for the management actions that are available in each of the dashboards.

Access to Process Portal dashboards

Access to the Team Performance and Process Performance dashboards is determined by the teams who are assigned to the dashboards in the Process Portal application. These teams and the default security groups that are assigned to them are defined in the System toolkit. You can change the default security groups or members of the team in the Process Admin Console.

The following table shows the default authorization for each of the dashboards.

Table 1. Default authorization for access to the Process Portal dashboards
Dashboard	Team	Security groups in the team
Process Performance	Process Owner	tw_process_owners tw_allusers Attention: All users typically need access to the dashboard so that they can navigate to the details for a process instance. If you want to restrict access to process owners only, use the Process Admin Console to remove the tw_allusers group from the Process Portal snapshot (Installed Apps > Team Bindings).
Team Performance	Managers	tw_managers Attention: The tw_managers group includes the tw_allusers group by default. If you want to restrict access to a set of manager users only, use the Process Admin Console to remove the tw_allusers group and include a set of managers (Server Admin > User Management > Group Management).

For more information about security groups, see IBM Business Process Manager roles.

Actions in the Process Performance dashboard

To manage a process and its instances, users require authorization to access the individual process and they must be authorized for actions on the process and its instances.

The following table summarizes the required authorization.

Table 2. Authorization for actions in the Process Performance dashboard
Action	Authorization
Access the dashboard for a specific process and its instances	A member of the team that is assigned to the Expose Performance Metrics setting for the business process in Process Designer.
Act on a process instance, for example, change the projected path or the instance due date	A member of the security group that is assigned to the following Process Portal action policies: ACTION_VIEW_PROCESS_DIAGRAM ACTION_VIEW_CRITICAL_PATH ACTION_CHANGE_CRITICAL_PATH ACTION_CHANGE_INSTANCE_DUEDATE For more information, see Configuration properties for Process Portal action policies .

In addition, some features in the dashboards are available only when certain settings are applied to the business process in Process Designer. For more information about these settings, see Enabling process instance management for a BPD.

Actions in the Team Performance dashboard

To manage the work for a team, users must be a member of a team of managers and they must be authorized for some actions on tasks.

The following table summarizes the required authorization.

Table 3. Authorization for actions in the Team Performance dashboard
Action	Authorization
Access the dashboard for a specific team and its members	A member of a team of managers that is defined in Process Designer. For more information, see Defining team managers.
Change the due date or the priority of a task	A member of the security group that is assigned to the following Process Portal action policies: ACTION_CHANGE_TASK_DUEDATE ACTION_CHANGE_TASK_PRIORITY For more information, see Configuration properties for Process Portal action policies

Attention: The System Data toolkit also contains an All Users team. The Managers of All Users team is the manager team for the All Users team and the teams in the sample that is delivered with the product.

The tw_allusers_managers group is the security group for the Managers of All Users team. This security group includes the tw_admins group by default. Members of the tw_admins group can therefore see the All Users team and the sample teams in the Team Performance dashboard. To remove the tw_admins group or add members to the tw_allusers_managers group, use the Process Admin Console.