has a plugable security mechanism and offers a variety of Security Managers. If you use the built-in security manager, a tenant admin can create users and roles directly in your tenants. See the Manage Users and the Manage Roles for instructions on creating users and roles.

also supports the LDAP Security Manager that pulls users and groups from your external Active Directory or Open LDAP system; a Delegating Security Manager such as used by Confluence; and custom security managers. Refer to your security manager documentation for instructions for creating users and roles. Note that with LDAP Security Manager and Delegating Security Manager, groups are the equivalent of roles.

On this page:

Creating Roles

With built-in security manager, a tenant admin can create and manage roles directly in a tenant; roles are commonly used in work flows and for digital signatures. See the Manage Roles topic for instructions on creating and managing roles.

With the LDAP Security Manager or Delegating Security Manager, groups are the equivalent of the roles created in tenants that use the built-in security manager. Please refer to the documentation for those security managers for information about creating users and groups (roles).

Creating Users

With ' built-in security manager, a tenant admin can create and manage users directly in a ' tenant. See the Manage Users topic for instructions on creating and managing users.

With the LDAP Security Manager or Delegating Security Manager, users and groups (which are equivalent to roles) are defined outside of .

Using Roles & Users

If you use LDAP Security Manager, please refer to your LDAP documentation, the Working with LDAP page, and LDAP Use Cases for information about using roles and users.

Security Manager Configuration

has a built-in security manager that allows you to create users and roles directly in your tenant. also supports:

LDAP Security Manager that pulls users and groups from your external Active Directory or Open LDAP system.
Delegating Security Manager used for Confluence
Custom

Access Control for Shared Item Users or Roles

The Access Cotnrol List allows the form designer to grant permission to view form/flow submissions to specific users or roles. Click on the icon on the Forms Home Page for forms and the Flows Home Page to create/edit the Access Control List.. The Access Control list screen has two sections: ACLEntry and ACLEntry roles.

Click on the User dropdown in the ACLEntry section to grant a specific user permission to view the form submissions. Choose a user from the displayed list of the current users in the tenant. The Permission dropdown shows a blank or submission_view option at this time. Choose submission_view and click the Submit button. The message "ACL was successfully saved" will display when the screen is submitted. Repeat for all users requiring permission to view the form submissions.

Click on the Role dropdown in the ACLEntry Role section to grant users with a specific role permission to view the form submissions. Choose a role from the displayed list of roles in the tenant. The Permission dropdown shows a blank or submission_view option at this time. Choose submission_view. Repeat for all roles requiring permission to view the form submissions. The message "ACL was successfully saved" will display when the screen is submitted.

Click on the icon to add another ACLEntry or ACLEntry Role section.

.

Shared Forms

The Shared Item screen will display on the Home Page of any user or a user with a specified role that has been granted the access to view the form/flow submissions via the Access Control list. Click on the Submissions icon to view them.