Set roles and permissions
Role memberships define which users and groups can access a process and what actions they can perform.
To configure role memberships, open a process and click Process Detail > Role Memberships.

On the page that appears, define users or groups that will have permissions to the process:
- System Administrators — Not editable. For all publish statuses for this process, all users in the System Administrators group in the Groups section have the following permissions: ViewConfig, Edit, Create, Delete, Run, Participate, Grant, Manage, and Monitor. Refer to the roles and permissions guide for more details.
- Process Administrators — Editable. Select the user icon to define users or groups with the following permissions for all publish statuses for this process: ViewConfig, Edit, Create, Delete, and Run.
- Process Testers — Editable. Select the user icon to define users or groups with the following permissions for the Testing publish status of this process: Run and Participate.
- Process Users — Editable. Select the user icon to define users or groups with the following permissions for the Production publish status of this process: Run and Participate. By default, all users in the Users group in the Groups section have access.
Role memberships also control request visibility across publish statuses. For example, users assigned to Process Testers should only have access to requests within the Testing scope of that process, while Production request visibility should remain limited to users with the appropriate Production access.
Permissions reports
You can generate built-in permissions reports from the roles and permissions area to review role assignments and permission configurations across the platform. For more information, refer to the permissions overview guide.