Privileges Required to Use Process Definitions

To use Process Definitions ( JobDefinition ), you need one of the following:

  • scheduler-administrator or redwood-administrator role
  • scheduler-job-administrator role
  • object, system or partition-level permissions

The sections below will reference the object-level permissions you need, however, equivalent system or partition-level permissions are also valid.

Using Process Definitions

The following privilege ranks are available on Process Definitions:

  • Create - allows you to create a Process Definition on the level the privilege was granted (system, partition), you have no further privileges through this rank, you automatically get All privilege rank on Process Definitions you create.
  • View - allows you to view a process Process Definition on the level the privilege was granted (system, partition), you have no further privileges through this rank.
  • View Processes - allows you to view a process on the level the privilege was granted (system, partition), you have no further privileges through this rank.
  • Submit - allows you to submit a process on the level the privilege was granted (system, partition), you have no further privileges through this rank.
  • Submit View - allows you to submit and view a process on the level the privilege was granted (system, partition), you have no further privileges through this rank.
  • Edit - allows you to create, view, and edit a Process Definition and process as well as submit, edit, and view a process on the level the privilege was granted (system, partition).
  • Edit Processes - allows you to view, submit and edit a process on the level the privilege was granted (system, partition).
  • Delete - allows you to create, view, and delete a Process Definition and submit, view, and edit a process on the level the privilege was granted (system, partition).
  • All - full control over a Process Definition on the level the privilege was granted (system, partition).

You always need View privileges on the partition of the Process Definition.

Process Definitions can reference the following objects, you need at least View privileges on these objects as well as their partition(s) when you want to create/edit/delete a Process Definition that references them:

Built-in Roles

  • The scheduler-administrator or redwood-administrator built-in role provides full access to Process Definitions.
  • The scheduler-viewer built-in role provides read-only access to Process Definitions.

Creating Process Definitions

You need one of the following privilege ranks to be able to create Process Definitions:

  • Create - allows you to create Process Definitions on the level the privilege was granted (system, partition), you have no further privileges through this rank, you automatically get All privilege rank on Process Definitions you create.
  • Edit - allows you to create, view, and edit all Process Definitions on the level the privilege was granted (system, partition).
  • Delete - allows you to create, view, and delete all Process Definitions on the level the privilege was granted (system, partition).
  • All - full control over all Process Definitions on the level the privilege was granted (system, partition).

Process Definitions can reference the following objects, you need at least View privileges on these objects and their partition(s) when you want to create a Process Definition that references them:

Submitting Process Definitions

To successfully submit a Process Definition, you must have one of the following privileges:

  • Submit - privilege rank on the Process Definition on the level the privilege was granted (system, partition, object).
  • Submit View - privilege rank on the Process Definition on the level the privilege was granted (system, partition, object).
  • All - privilege rank on the Process Definition on the level the privilege was granted (system, partition, object).

As well as the following privileges

  • View Jobs - privilege rank on the Queue where the process is supposed to run, or on Queue in the Queue's partition or on Queue system-wide
  • View - privilege rank on the Process Server that serves the Queue and where the process is going to run, or on Process Server that serves the Queue and where the process is going to run in its partition or system-wide

You also require View privileges on the partition of the Process Definition, of the Queue, and of the Process Server where the process is going to run.

Optionally, if you want to use a library, Submit Frame and/or Time Window, you will need View privileges on them and their partition, as well. If the Process Definition has a default Submit Frame, a default Time Window, or uses a library (in parameters or in the code) you will require View privileges on the objects or you will not be able to submit the Process Definition or restart the process.

Process Definitions can reference the following objects, you need at least View privileges on these objects and their partition(s) when you want to submit a Process Definition that references them:

Editing Process Definitions

To successfully edit a Process Definition, you must have one the following privileges:

  • Edit - privilege rank on the Process Definition on the level the privilege was granted (system, partition).
  • Delete - privilege rank on the Process Definition on the level the privilege was granted (system, partition).
  • All - privilege rank on the Process Definition on the level the privilege was granted (system, partition).

You also require View privileges on the partition of the Process Definition.

Process Definitions can reference the following objects, you need at least View privileges on these objects and their partition(s) when you want to edit a Process Definition that references them:

See Also