Skip to main content
Question

Securing runtime server - giving access to 1 workflow for 1 role

  • August 7, 2026
  • 1 reply
  • 4 views
may_kwok
Rocket Pioneer L1
Forum|alt.badge.img+4

Version 16.3.0, on PaaS.

Normally, our Ataccama team gets access to all workflows in the admin centre.

I’ve got a use case where we want to allow users with 1 RDM role to run 1 workflow. They should not be able to run any other workflows.

I’m trying to play with the intercepturls in the git project.

  • I tried giving access to the welcome page, but it comes up weird.
    • Normal welcome page:

       

    • Welcome page for my test user:

       

  • How do I neatly provide the access to just that 1 workflow but also allow them to navigate to it? Or am I stuck having to give them the exact URL?
  • I can’t give /console/wfConfigs/** to allow them to browse to the workflow, because that would automatically allow them access to all workflows.

Any ideas?

1 reply

may_kwok
Rocket Pioneer L1
Forum|alt.badge.img+4
  • may_kwokRocket Pioneer L1
  • Author
  • Rocket Pioneer L1
  • August 7, 2026

Follow up question:

OK I think I’ve got around the navigation so that the users will be able to traverse down to the ewf. 

My intercepturl is as follows right now:

<interceptUrl access="hasAnyRole(&#39;RDM_admin&#39;,&#39;RDM_poweruser&#39;,&#39;RDM_FX_IT_User&#39;)" pattern="/console/welcome/**"/>
<interceptUrl access="hasAnyRole(&#39;RDM_admin&#39;,&#39;RDM_poweruser&#39;,&#39;RDM_FX_IT_User&#39;)" pattern="/console/wfConfigs/"/>
<interceptUrl access="hasAnyRole(&#39;RDM_admin&#39;,&#39;RDM_poweruser&#39;,&#39;RDM_FX_IT_User&#39;)" pattern="/console/wfConfigs/?page**"/>
<interceptUrl access="hasAnyRole(&#39;RDM_admin&#39;,&#39;RDM_poweruser&#39;,&#39;RDM_FX_IT_User&#39;)" pattern="/console/wfConfigs/**0514_SUN_fx_api_adhoc_export.ewf/"/>
<interceptUrl access="hasAnyRole(&#39;RDM_admin&#39;,&#39;RDM_poweruser&#39;)" pattern="/**"/>

My only issue is the really ugly interface. What syntax do I need to put to get the page a bit prettier?

Community Terms of Use & ConditionsAccessibility statement