Question
WIPRO
IN
Last activity: 9 Mar 2023 8:39 EST
Access Group vs WorkGroup
Hi
In my application, I have cases of one particular case type. Lets say PurchaseRequest. I have lot of purchase requests cases sitting in two workqueues WQ1 and WQ2. Its routed to different workqueues based on "country" property. Assume WQ1 for India and WQ2 for US
I have IndiaWG mapped to WQ1 and USWG mapped to WQ2
Now, I have the below questions
1. Operators in the different teams have exactly the same power. Is it okay to define a single access group and operators mapped to the same access group but different work group?
2. I have a global team (kind of super users) who are not part of these workgroups but would like to access all the team member worklists and workqueues. How to give access to these super users?
I gave the above example for easy understanding. In my real application, I want to provision the operators in SSO and I dont have any differentiator to set different workgroups. So is it better to create individual access groups against SAML active directory and map each with a work group?
Please advise.
Thanks
Mohan
Bits In Glass
IN
-
It is generally okay to define a single access group for operators in different teams as long as they have the same access needs and permissions. By mapping these operators to different work groups, you can ensure that they are routed to different work queues based on the country property. This can help to organize work and ensure that the right people are working on the right cases.
-
To give access to super users who are not part of the work groups, you can add them to a separate access group that has permissions to access all work queues and work lists. This access group can be assigned to the super users to give them the required permissions.
Regarding SSO provisioning, you can create individual access groups against SAML active directory and map each with a work group. This can help to ensure that the right people have access to the right work queues and work lists based on their roles and permissions. You can also use access roles to control access to specific parts of the application based on the user's role or responsibilities.
WIPRO
IN
@Sumit Kumar Thanks for the response
Bits in Glass
IN
@MOHANRAJS7274 you can 3 access groups created in pega. You can map the object id from saml xml to the access groups in the data type. In the post auth activity loop assertion data page, use object id to get the access group from the data type and then update the created operator id. You can map the work group also here and update the operator in the same activity.
WIPRO
IN
@Anoop Krishna Thanks for the response