An application includes three case types. A business requirements states that members of the App:Users access role cannot run reports for one of the case types. Which configuration can you apply to satisfy this requirement?
A.
Use an Access When record to verify that the user role has access to the Run reports action.
B.
Use an Access When record to verify that the case type has access to the Run reports action.
C.
Use an automation to verify that the user does not have the App:Users access role.
D.
Use an Access Deny record to set the Run reports action to No Access.
Answer is D.
Access deny
Access deny records deny actions on class instances, such as opening cases or running reports. You cannot use an Access deny record to deny access to tools or individual records explicitly. Access deny records are indicated on the Access Manager. For example, users are explicitly denied the ability to delete New vendor cases.
Answer should be B:
In an Access Role, an Access When rule is configured on the class for which reports cannot runned. This Access Role is then added to the Access Group for users that are not allowed to run the reports.
By the way, the line "...members of the App:Users access role..." is not correct. A user is not a member of an access role, a user has an access role via it's access group.
Based on the scenario that the members of App:Users cannot run reports for ONE of the case types (and not all three of them, just one), it is best to use an Access When record.
For a better explanation, here are the links from Pega:
https://academy.pega.com/topic/attribute-based-access-control-abac-security-model/v3#p-80d5c843-ef71-429f-be0b-33465bc3c2cf
https://docs.pega.com/bundle/platform-88/page/platform/security/access-when-rules.html
upvoted 1 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
khushi1982
Highly Voted 9 months, 3 weeks agoPalazzo
Most Recent 1 month, 3 weeks agoPradeep5
6 months, 4 weeks agokmrk
8 months, 4 weeks agoAlex1999
10 months agoNathalee
9 months, 2 weeks ago