User Access Management

You can use the credentials from the Camunda Platform users to access Optimize. However, for the users to gain access to Optimize, they need to be authorized. This is not done in Optimize itself, but needs to be configured in the Camunda Platform and can be achieved on different levels with different options. If you do not know how authorization in Camunda works, please have a look at the authorization service documentation.

When defining an authorization to grant Optimize access, the most important aspect is that you grant access on resouce type application with resource id “optimize” ( or “*” if you want to grant the access for all applications including Optimize). The permissions you can set, are either choose ALL or ACCESS. They are treated equally, so there is no difference between them for now.

Authorizing users in admin could be done like in the following:

1. The first option allows acces for Optimize on a global level. With this setting all users are allowed to log in into Camunda Optimize.
2. The second option defines the access for a single user. The user Kermit can now log into Camunda Optimize.
3. The third option provides access on group level. All users belonging to the group optimize-users can log in into Camunda Optimize.

It is also possible to revoke the Optimize authorization for specific users or groups. For instance, you can define Optimize on a global scale, but exclude the engineers group: