How to manage the new workflow permissions
To help you fine tune workflow management, Collibra version 2024.05 introduces two new global permissions that are designed to give you more control over who in your environments can use workflows. This allows administrators to restrict the ability of users to trigger workflows, which incurs a cost for the organization.
The new workflow permissions require administrator action to maintain existing user functionality. Users who leverage workflows must be assigned to a role that has the Start workflow permission, the Participate in workflow permission, or both based on their needs.
Permission | Description | Required license type** | New license type |
---|---|---|---|
Start workflow |
|
Read-only |
Contributor |
Participate in workflow |
|
Read-only |
Contributor |
* The out-of-the-box Voting Sub-Process creates a separate voting task for each of the participants. If any of the participants do not have a role with the Participate in workflow permission, the process fails, without creating any voting task. If you are using the Approval Process, Simple Approval, the Issue Management workflow, or a custom workflow that calls the Voting Sub-Process, either ensure that all the voting participants have a role with the Participate in workflow permission or download version 2024.05 or newer of the Voting Sub-Process.
** When a user that does not consume a Standard license participates in or starts a workflow, they retain their Read-only license but are counted against a Standard license for the current calendar month. This number is then reset at the start of the following calendar month.
Users without the Start workflows permission might not be able to see the global create button anymore.
Recommended setup
To take full advantage of the new permissions, add them just to the roles that require them.
A good starting point for this analysis is the Latest Workflow Participation column of the Users table. You can add the column to see the data in Collibra or you can download a CSV file for greater sorting flexibility:
-
On the main toolbar, click
, and then click
Settings.
The Collibra settings page opens. - Click Users.
The user table appears. - Above the table, to the right, click .
The Export users activity starts.
- When the Export users activity is finished, you can download the CSV file:
-
On the main toolbar, click
→ Show more.
Your profile page opens on the Activities tab page.
- In the Results column of the Export users activity, click Results.
Depending on your browser and browser settings, the files are downloaded to a default location or a dialog box appears to specify the location for the downloads.
- In the Results column of the Export users activity, click Results.
By analyzing how users participate in workflows and the global roles of their groups, you can identify which global roles need the new workflow permissions in your organization.
Setup for keeping current functionality
To keep the current functionality as it is and allow all users to start and participate in workflows:
- Create a new global role, for example Workflow user:
-
On the main toolbar, click
, and then click
Settings.
The Collibra settings page opens. - Click Roles and Permissions.
The roles and permissions settings appear on the Global Roles tab page. - Above the table, to the right, click Add.
The Create Roles dialog box appears. - Enter one or more role names.
- Click Submit.
-
On the main toolbar, click
, and then click
Settings.
- Assign the Start workflow and Participate in workflow global permissions to the new global role:
-
On the main toolbar, click
, and then click
Settings.
The Collibra settings page opens. - Click Roles and Permissions.
The roles and permissions settings appear on the Global Roles tab page. -
In the tab pane, click
Global Permissions.
The matrix of global permissions and roles appears. - If required, add or remove columns:
- On the content toolbar, click and select or clear the role checkboxes.
- Above the table, to the right, click Edit.
You can now edit the matrix of permissions and roles.
- Select or clear the checkboxes for a role to add or remove permissions.
- Above the table, to the right, click Save.
-
On the main toolbar, click
, and then click
Settings.
- Add the Everyone group as a member of the Workflow user role:
-
On the main toolbar, click
, and then click
Settings.
The Collibra settings page opens. - Click Roles and Permissions.
The roles and permissions settings appear on the Global Roles tab page. - Hover over the name of the role you want to manage and click Preview.
The Members sidebar appears.
- Click Add Member.
The Add Member dialog box appears.
- Select one or more users or user groups and click Add Member.
-
On the main toolbar, click
, and then click
Settings.