Role Based Access Control in Document Understanding is finally here! Users in large organizations with complex compliance requirements have been confined to using AI Center to access Document Understanding capabilities due to Document Understanding itself not having Role Based Access Control capabilities. Not anymore!
Starting August 8th you will be able to control at a Tenant level and at a Project level who can do what, and most importantly, who can see what data, in the Document Understanding product in Automation Cloud.
Several key aspects to keep in mind about what will happen on Aug. 8th:
- Users who are part of the Administrators default group in their organization’s Cloud account will be mapped to the DU Administrator role in DU. This means they will not see any changes to their interface.
- Users who are part of the Automation Developers default group in their Cloud account will be mapped to the DU Contributor role in DU. This means they will no longer be able to create/delete projects in DU. Also, they will not be able to edit role assignments.
- Users who are part of the Automation Users default group in their organization’s Cloud account will be mapped to the DU Viewer role in DU. This means they will no longer be able to create/delete projects, create/open/delete Document Types, or deploy/delete Extractors or Classifiers.
- Users who are only part of any other group in their organization’s Cloud account will not be mapped to any role in DU, which means they will lose access to DU.
For all users who feel they need more permissions to do their work, please reach out to an Administrator if your Cloud organization account to get added to the appropriate group before the Aug 7th date, or after that date, to get the appropriate role assigned to your user. If you do not know who your organization account Administrator is or they cannot be reached, please file a Support ticket here.
For more details about how RBAC works in DU, see the Documentation.
For the time being, in order to edit role assignments you need to have both DU Administrator role as well as the organization Administrator role at Cloud Account level. This limitation will be removed by the end of the current year.
Thank you for using DU and Happy Automating!
The Document Understanding team.