Managed Permissions
Overview
Moveworks imports a variety of user attributes such as division, department, country code from Chat, ITSM, or IDAM integrations. These user attributes can be made available to the Moveworks Access Control Platform to be used to configure access control for resources such as forms and knowledge natively within Moveworks, without having to rely on a 3rd party system.
Managed Permissions cannot be co-exist with Mirrored Permissions
For any integration that supports mirrored permissions, the managed permissions setup cannot be configured simultaneously.
Supported Restrictions
Moveworks can enable restrictions on any user attribute imported into the Moveworks user profile, and the following attributes of an article:
- Knowledge base of the knowledge platform. e.g:
- For ServiceNow, this is the "knowledge base"
- For Confluence, this is the "space"
- For Sharepoint, this is the "site"
- For Moveworks FAQs, this is the "Sheet tab"
- Information on the HTML url of the article
Example restrictions
- Only show articles from the HR ServiceNow Knowledge Base to users in specific countries:
- e.g:
(resource.knowledge_base.$LOWERCASE() IN ["ITHELP".$LOWERCASE()]) AND (user.country_code.$LOWERCASE() IN ["Cambodia", "Thailand", "Vietnam".$LOWERCASE()])
- e.g:
- Only show articles from the ITHELP Confluence space to users in the Engineering division
- e.g:
(resource.knowledge_base.$LOWERCASE() IN ["ITHELP".$LOWERCASE()]) AND (user.division.$LOWERCASE() IN ["Engineering".$LOWERCASE()])
- e.g:
Updated 18 days ago