Permissions

Important: This feature is currently in open beta. For more information, see the Nintex Beta terms document. If something is not functioning correctly, please raise this with support@nintex.com

Nintex Processes permissions determines who can access, edit, and manage processes in your organization.

Access is controlled by these three things:

  • Where the process is in the folder tree.

  • What state the process is in (unfiled, filed, draft, or published).

  • Which access role the user holds.

Folder permissions form the basis of your access. They can be viewed as 'groups'. You do not grant a user access to a process, you grant that user access to a folder, and every process inside that folder, along with the content of every sub-folder beneath it.

Access permissions funnel

Access becomes more restricted as you move down the folder hierarchy, with each subfolder potentially granting access to a smaller audience.

A user must have access to a folder before they can be granted access to any of its subfolders. As a result, permissions are always assigned from the top down. In practice, the people picker for a subfolder displays only users who already have access to its parent folder.

Access roles

Access roles define what users can do and what actions they are not permitted to perform. These include things like creating folders and sub-folders, managing settings, creating, editing, and viewing drafts and processes. Roles can be combined, allowing a user to be both a folder Owner and a Platform Admin.

Role

Scope

Can do

Can't do

Platform Admin Whole workspace
  • Create root folders.

  • Manage workspace and folder access.

  • Create and edit drafts.

  • Publish where permitted.

  • Archive.

  • Restore.

  • Permanently delete.

  • Remove or demote the last folder Owner.

  • Edit a published process directly.

Owner Owned folders and descendants
  • Create root folders.

  • Create processes outside a folder unless they also hold Designer or Platform Admin.

  • Restore archived processes.

  • Permanently delete archived processes.

Designer Assigned folders, plus drafts they create or collaborate on that are not in folders
  • Create processes outside a folder.

  • Design and edit drafts.

  • Publish where permitted.

  • Assign Process Owner or Process Expert roles to a process.

  • Manage permissions or inheritance.

  • Create folders.

  • Archive unless also a Contributor in that assigned folder.

  • Restore archived processes.

  • Permanently delete archived processes.

Contributor Assigned folders
  • View, create, edit, and publish processes and filed drafts in assigned folders.

  • Assign Process Owner or Process Expert; archive in assigned scope.

  • Create processes outside a folder.

  • Manage permissions or inheritance.

  • Create folders.

  • Restore archived processes.

  • Permanently delete archived processes.

Viewer Assigned folders Read published processes only. See drafts, draft badges, draft rows, draft search results, or any create, edit, publish, archive or permission controls.

Role considerations:

  • A Designer can start an unfiled process, meaning a process that is not stored in a folder. A Contributor can only start processes from folders to which they have been granted access. Conversely, a Contributor can archive items within their assigned folders, while a Designer cannot archive items in any folder.

  • A folder Owner can archive items but cannot restore or permanently delete them. Recovery actions are intentionally restricted to the workspace level. See Archive processes for more information.

  • To be assigned a process role (Process Owner or Process Expert) the user must first be assigned an access role.

Permission matrix

Visibility

Platform Admin

Owner

Designer

Contributor Viewer
See the folder hierarchy All folders Only as assigned     Only as assigned
View published process ✔ ✔ ✔ ✔ ✔
View drafts in a folder ✔ ✔ ✔ ✔ ✘
View unfiled drafts ✔ ✘ Own only * ✘ ✘
See draft indicators, rows, and search results ✔ ✔ Only as assigned Only as assigned ✘

* Visible only where the user is the creator or a named collaborator on that draft.

Systems Permissions

The systems page permissions control who can create, edit, and delete the systems in your Nintex Processes catalog.

A system is an application or tool that your processes use, such as a CRM or an HR tool. You manage the catalog of systems on the Systems page, and you can then assign those systems to activities in a process. Everyone can see the catalog, but only people with the right role can change it. This keeps the list accurate and prevents accidental changes.

Nintex Processes only shows the buttons and menu options that you are allowed to use. If you cannot create, edit, or delete systems, those options do not appear.

Role

View systems

Create

Edit

Delete
Global Admin or Automation Admin ✔ ✔

✔

✔
Designer ✔ ✘

✔

✘
Participant ✔ ✘

✘

✘

Considerations