How to exclude Correspondence agent from ABAC restrictions
We have the following scenario:
- Case type is setup to allow e-mail approval.
- ABAC is implemented in our app to restrict Read access to users that are not part of a HubName. The Hub name is defined in a special .HubName property in the case type.
- ABAC is also using the OOTB "isBatchRequestor" when rule. (screenshot of the setup below)
When you try to approve a task via e-mail, it gets an exception "You are not authorized to open instance XXXXX."
Disabling the ABAC allows e-mail approval to function as expected.
Do you know how can I allow the correspondence agent to access & update the case thru the ABAC?