Creating an RBAC rule in the Review Center

Users assigned to the RPA-ADMIN role can create RBAC rules from the Review Center Configuration page. An RBAC rule grants a set of permissions to one or more principals and can optionally restrict access to documents that match specified conditions.

To create an RBAC rule:

  1. Navigate to Settings > Review Center Configuration. The Settings page displays these tiles to manage these settings:
    • OAuth provider settings
    • Review center mapping settings
    • Role based access controls and settings
  2. Click the Role Based Access tiles. The Role Based Access page is displayed.
  3. Click the arrow option corresponding to the use case in which you want to create a rule. The use case details page is displayed.
  4. Click the Create Rule option on the Access Rule tab. The rule wizard is displayed.
  5. Select a principal type. Possible values:
    • User
    • Security Role
    • Location
    • Accounting Entity

    For a User principal type, search for and select the user by email address. For other principal types, specify or select the appropriate value. Verify the display name. For user principal type, the display name is populated automatically. For other principal types, you can specify or modify the display name as required.

  6. Add additional principals, if required.

    A rule can include multiple principals. Access is granted only when a user matches all principals that are defined in the rule.

  7. Define the document access scope. Possible values:
    • Grant access to all documents.
    • Restrict access by conditions.

    If you select Filter by Conditions, add one or more conditions. Each condition requires an attribute, operator, and value. Supported operators include Equals, Not Equals, In, and Not In.

    At least one condition is required before you can continue. Conditions are evaluated in the order listed.

  8. Select the permissions to grant. Possible values:
    • View Document
    • Edit Document Fields
    • Edit Table Data
    • Update Fields
    • Submit
    • Archive
    • Move
  9. Review the rule summary.
  10. Click Save. The rule is created, added to the access rules list, and applied immediately.

    The Access Rules list displays the principals, permissions, and status for each rule. Users assigned to the RPA-ADMIN role can edit, activate, deactivate, or delete existing rules from the list.