Access Rights on specific Case / Flow by work group
I have 5 different Roles.
1. Role Philippines - Work Group
2. Role USA - Work Group
3. Role Spain - Work Group
4. Role France - Work Group
5. Role Germany - Work Group
* All Roles / Work group can create new case. But each role/workgroup can only update their created cases.
Example:
Role Philippines - Work Group -> can Create, Update, Read and Delete their "Role Philippines" created case; but "Role USA created case" can Read only
Role USA - Work Group -> can Create, Update, Read and Delete their "Role USA" created case; but "Role Philippines created case" can Read only
Updated: 30 Jan 2026 7:37 EST
Pegasystems Inc.
CA
To implement Read and Create restrictions using Attribute-Based Access Control (ABAC), you must define specific Access Control Policies and Conditions that compare the user's attributes (like their Work Group) to the data on the case.
Read Read (None or Always True) All regions can view all cases.
Create Update Case.WorkGroup == User.WorkGroup Allowed, as the new case is assigned the user's group immediately.
Update Update Case.WorkGroup == User.WorkGroup Denied if the case belongs to a different region's Work Group.