Tenant administrators can assign the Restricted Integration User role.
To assign this role, tenant administrators must:
- Assign the Restricted Integration User role to a user.
- Assign workspaces where the restricted integration user can manage connections and integrations.
Tenant administrators must select at least one workspace.
Note: When the tenant administrator selects workspaces for the restricted integration user, this action doesn't grant the user access to the workspaces themselves, or to the workspace models.
To get access to both the workspaces and models, workspace administrators can add users to a workspace from within model.
Assign Restricted Integration User role and workspaces
To assign the Restricted Integration User role and workspaces:
- Access Administration from the Application menu.
- Select Users > Internal.
- Select a user from the list.
Note: If you want to create an internal user, you must be a user administrator. - Select the Roles tab from the right-hand panel.
- Turn on the Restricted integration user toggle.
- Select at least one workspace for the user to manage.
You can also:- Search for a workspace in the Find a workspace field.
- Choose Select all or Deselect all to select or deselect all listed workspaces.
- Select Save.
The restricted integration user also needs access to the workspaces you selected for them, as well as appropriate model role permissions for the models they have access to. To get both workspace and model access, a workspace administrator can add the restricted integration user to a workspace from within a model.
Keep in mind:
To run a CloudWorks integration, the model role set for the user:
- Must have the appropriate action permissions.
- Must have access to any items that are restricted due to access constraints on imports (such as Selective Access or Dynamic Cell Access).
Notes:
- If Dynamic Cell Access is enabled when an integration is run by a restricted integration user, the integration uses the permissions associated with that user.
- If Selective Access is enabled for a list:
- The appropriate read/write permissions must be enabled for the restricted integration user.
- The restricted integration user doesn't use the permissions from the Internal (Full Access) alias (role).
For more information, see these pages:
- Import Basics (see the Access constraints on imports section at the bottom of the page)
- Access constraints for model-to-model imports
Unassign Restricted Integration User role
When the Restricted Integration User role is unassigned, the user no longer has access to connections or integrations within the workspace.
To unassign the Restricted Integration User role:
- Access Administration from the Application menu.
- Select Users > Internal.
- Select a user from the list.
- Select the Roles tab from the right-hand panel.
- Turn off the Restricted integration user toggle.
- Select Unassign role.
