Question
Manage Notification for User Access in PDC
Hi,
Can we change user access level in PDC.
By default, Manager has all the access and can set the notification but we have a requirement where we want any PDC users to set notification as per their need but seems this option is only available for manager role.
Accepted Solution
@AnandP I've passed on your requirements to the SME.
Their comments:
"Long term plan is to use MSP roles for PDC access control, instead of having standalone roles defined in PDC. Apart from user & manager role, we'd like to have a third role - admin - that will be allowed to change tenant wide settings (SSO, operator privacy, user authentication etc.).
This role will be mapped to Account Admin or Security Contact in MSP.
In the future we're also considering granular access control based on Project ID (similar to what PegaSupport implemented recently)."
I hope this answers your question.
@AnandP In Pega Predictive Diagnostic Cloud (PDC), user access levels are defined by roles: Manager and User. By default, only users with the Manager role can manage notification subscriptions. However, you can create operator records with the Manager role for users who need to set notifications, as described in the Creating operator records reference. Keep in mind that this will grant them additional administrative privileges in PDC.
This answer came from a Pega gen-AI assistant using the following references
We have several application teams using the same PDC tenant and we being part of COE team would like to have manager access within our team only as it provides access to all systems. It would be great if PDC will have features to control the access level in more granular way rather than having just 2 roles. Could be an enhancement request for future.
Hi @AnandP.
Just so that I understand your issue a bit more before approaching our SME:
Is your scenario not covered by the steps suggested in the documentation below?
Managing system access in Pega Predictive Diagnostic Cloud
Hi @MarijeSchillern,
System access can be restricted by managers but if multiple teams have manager access, they can remove this restriction again I believe? that's why in our case it would be better to have below access levels:--
1) Global Administrator (Full access to PDC and only 1-2 persons in the organization will have access)
2) Manger Access or App Admin access (One from each application team has access and can manage admin task for their application only)
3) User access (Read only access to their system only)
Today manager access behaves like global administrator and that's why we don't want to provide this access to eeveryone.
Let me know what you think.
Accepted Solution
@AnandP I've passed on your requirements to the SME.
Their comments:
"Long term plan is to use MSP roles for PDC access control, instead of having standalone roles defined in PDC. Apart from user & manager role, we'd like to have a third role - admin - that will be allowed to change tenant wide settings (SSO, operator privacy, user authentication etc.).
This role will be mapped to Account Admin or Security Contact in MSP.
In the future we're also considering granular access control based on Project ID (similar to what PegaSupport implemented recently)."
I hope this answers your question.
Thanks @MarijeSchillern for providing updates and continuous support.