Providing access to record instances by defining security labels

As an administrator, you can use security labels to enable the row level security. Security labels define a series of groups, user name, roles that can access record instances by using a rule or a process. They add view and edit restrictions to record instances and fields. You can create security labels by using the Record designer.

You can use the security label as a group while assigning permissions to a field or set the security labels through processes and rules.

Before you begin

Make sure that you have created the security label. For more information, see Enabling row level security by defining security labels.

To grant row-level access to create and update record instances by adding security labels

1. Log in to BMC Helix Innovation Studio and navigate to the Workspace tab.
2. Select the application in which you want to create a process or modify an existing process.
3. Perform any of the following tasks:
   • If you want to create a new process, select Processes > New. 
   • If you want to update an existing process, select the process, and click Edit.
4. Drag the Create Record or Update Record element to the canvas according to the operation you want to perform.
   

5. In the Properties pane, in the INPUT MAP section, fill out the properties as described in the following table:

   Field	Action
   Record Definition Name	Select the record definition for which you want to set the security label. You can select a record definition from the current application.
   Add/Remove Input Map Field	Select the fields of the record definition that map to the process parameters or to an expression that assigns a value to the mapped fields. The new record instance is created by using the values assigned to the mapped fields.

6. To add new security labels for Create Record element, perform the following steps:
   1. Click Edit Security Labels.
   2. On the Edit Security Labels page, select the existing security label created for the record instance. 

   3. From the Security Label to Set section, click the Click to build an expression link, and add the list of group names, user names, roles, or functional roles for which you to grant access.

      

7. To add new security labels for Update Record element, perform the following steps:
   1. From the Security Label Actions section, select Add Security Labels.
   2. Click Edit Security Labels.
      
      

   3. On the Edit Security Labels page, select the existing security label created for the record instance. 

   4. From the Security Label to Set section, click the Click to build an expression link, and add the list of group names, user names, roles, or functional roles for which you to update the row-level access.

8. Click Save.

To update row-level security for update record instances

1. Log in to BMC Helix Innovation Studio and navigate to the Workspace tab.
2. Select the application in which you want to create a process or modify an existing process.
3. Select the process you want to update, and click Edit.

4. Drag the Update Record element to the canvas according to the operation you want to perform.

5. From the Security Label Actions section, select Add Security Labels.
6. Click edit on the existing security label. 

7. On the Edit Security Labels page, select the existing security label created for the record instance. 

8. From the Security Label to Set section, perform the following steps:

   1. To add to the existing values, click Append to Existing Values , and click the Click to build an expression link, and add the list of group names, user names, roles, or functional roles that you want to grant access.

      Important

      If you do not click Append to Existing Values , then the existing values are deleted and you can add new values for the security label.

      
      

   2. To add new values, click the Click to build an expression link, and add the list of group names, user names, roles, or functional roles that you want to grant access.

9. Click Save.

To remove row-level access for record instances

1. Log in to BMC Helix Innovation Studio and navigate to the Workspace tab.
2. Select the application in which you want to create a process or modify an existing process.
3. Perform any of the following tasks:
   • If you want to create a new process, select New > Processes tab. 
   • If you want to update an existing process, select the process, and click Edit.

4. Drag the Update Record element to the canvas according to the operation you want to perform.

5. To remove the security labels, from the Security Label Actions section, select Remove Security Labels.

6. On the Edit Security Labels page, select the existing security label created for the record instance. 

   
   

7. To remove specific access, from the Security Label Value Removal field, select Remove Specific, and click the Click to build an expression link, and add the list of group names, user names, roles, or functional roles for which you want to remove the access.

   
   

8. To remove access for all the values, from the Security Label Value Removal field, select Remove All.

   
   

9. Click Save.

Related topics

Enabling row level security by defining security labels

Creating hierarchical groups by defining security labels