Before we start, let's review some facts about Licenses.
Every user in the system requires a license to access the SAP Signavio Process Manager or the Collaboration Hub. There are differences in the licenses for SAP Signavio Process Manager which can be assigned to users, once they have been purchased.
- SAP Signavio Process Manager - Classic License: This license is the most basic one for process modelers and grants access to all features required to model and document business processes. This license does not allow custom modeling conventions or custom dictionary categories.
- SAP Signavio Process Manager - Enterprise License: The Enterprise license gives access to additional analytical features in addition to all modeling components. Users can also create enterprise architecture diagrams by using ArchiMate 3.0
- SAP Signavio Process Manager - Enterprise Plus License: This license type is the most extensive. In addition to all features included with the Enterprise license, users can also create decision diagrams and validate decision logic in those diagrams.
- SAP Signavio Collaboration Hub - the Hub license: This license is required for every user who needs to access the Collaboration Hub and view the published content.
Since a license is always bound to a certain user, let's check what happens if users get invited or removed form workspaces:
There are two types of users, modeling users and Collaboration Hub users.
By default, every modeling user has access to the complete content in the Share documents folder. To restrict access rights of users, you can assign them to a user group with limited access permissions when you invite them to your Process Manager workspace.
To restrict access rights based on organizational roles, we recommend setting up a folder structure that reflects the different access right variations (see examples for possible folder structures later in this lesson). Then, create user groups with access rights that are tailored to your organizational requirements.
Collaboration Hub Users
These users only have access to diagrams that have been explicitly published to the Collaboration Hub. The way you can manage access rights for the Collaboration Hub users depends on your usage scenario:
If the users authenticate via an Active Directory- or a SAML-based mechanism, you can manage access rights of the Collaboration Hub users based on their Active Directory user groups or names or SAML identities.
If you roll out an authentication certificate to your Collaboration Hub users, all users will have access to all published diagrams.
There are two different ways to manage users and groups:
- Using an included central user management accessible via SAP Signavio Collaboration Hub
- Using SAP Signavio Process Manager directly
Option 1: Using the Central User Management. We recommend using this option to:
- invite workspace users (per bulk or instantly)
- get a quick overview of all users
- get an e-email list of all users with one click
- remove users from all SAP Signavio Applications
- create or delete user groups
- Start via the Collaboration Hub - Open the settings in the left-hand corner of the menu bar.
- Click on User Management- Here you see the area for the Collaboration Hub, but for this we'll just focus on the user management.
- Explore the functions in the Central User Management - This is the area where you can use your admin power. Have fun!
Option 2: Manage users in SAP Signavio Process Manager We recommend using this to:
- move users from one group to another (remove & add)
- define authorizations on users or user groups to specific folders (H,R,W,D,P) or dictionary categories (V,W,D,P)
- activate feature sets for your created groups
- Start from your SPM workspace - Open the setup in your workspace.
- Select User Groups - You can manage user groups here or the central user management.
- Select the tab Access Rights - Under this tab you can manage all the user or group access rights based on folders, dictionary, or process documentation templates.
Creating User Accounts
There are two ways to create user accounts. Click on the icons on the following image to learn more.
Create User Accounts
Users Invited to a Workspace
In the User Management, you invite new users to your workspace. You also select the license type and the user groups you want to assign to the new user.
The license for a new user is connected to the email address in which you sent the invitation. The new user has to register with the same email address to use the license.
Users Invited for Feedback
SAP Signavio Process Manager users can invite internal and external process stakeholders to review and comment on diagrams. Internal users already have an account. Externals need to create one to log in.
Click each option to learn more about the differences between internal and external users when invited for feedback.
You have the following options to add users to your workspace:
- Create accounts with bulk invites, in case you want to invite multiple users at the same time into the workspace.
- Create user accounts individually, if you want to invite a specific user.
Every user you invite to your workspace has the following default permissions:
- Viewing and editing diagrams in the folder Shared documents
- Viewing and editing dictionary entries
You can change these permissions by going to Setup --> Manage Access Rights.
Details about access rights will be covered in the next lesson.
In this lesson, there will be several videos showing how to complete each task. If you need to pause the video at any point, just click the video screen, and it will pause, click the screen again for it to resume.
Let's take a look at how to send bulk invites.
Click play to watch the video on how to create accounts with bulk invites.
Instant Account Creation
Now, let's take a look at how to create and manage accounts instantly.
Click play to watch the video on how to create accounts.
Edit or Delete User Account
Within the Users tab, you can assign licenses to a user, assign users to groups, reset the user's password, and delete an account. Please note that when you delete an account, all content in the My Documents folder is removed from the workspace. However, the content in Shared Documents folder, user's comments, and changes made will remain there.
Click play to watch the video on how to delete and edit a user's account.
Now, that we learned how to create, edit, and delete user accounts, let's take a look at how to do this with groups.
Instead of clicking the tab Users, we will now look at the Groups tab. In the Groups tab you can edit the name of the group, add new users to a group automatically, create a group hierarchy, and remove users from a group.
In the video below, we want to edit the name of our group - Users in Asia. We want to rename it to, Users in Southeast Asia, add new users to this group automatically, and add two new users - Lisa and Eliza.
Watch the video below to learn more.
When customizing user groups, you can set one or more groups as default groups. For example, you can use a default group to provide new users with a basic set of access rights.
To define a group as a default group, activate the option Add new users to this group automatically (we saw this function in the video above) in the group settings. Each user invited through the user management is assigned to all default groups by default.
To assign the user you want to invite to another group, you can assign user-specific user groups in the user management dialog when you set up the invitation.
Users created with SAML or CSV API are also assigned to the default groups, unless you specify other user groups by configuration.
Activate Feature Sets
You can activate specific feature sets in the user group management dialog. You can provide each modeler group with the feature sets they need to perform their tasks. Restricting feature sets is useful if only a certain group of users is allowed to upload documents to the workspace or run reports on process models.
Create Workspace Administrators
In SAP Signavio Process Manager, administrators have extensive permissions to manage workspace settings and user access. The only thing they can't access or manage is the content in a modelers My Documents folder.
To create an administrator account, you create a user account and assign it to the Administrators user group. The user then receives administrative rights for your workspace. To revoke administrative rights, remove the user from the Administrators group.
Click the numbers, starting with number 1, to review the Key Takeaways from this lesson.