Granting Access

Share Modal (UI)

Open the Share modal from the workflow toolbar (share icon). The modal lets you:

• Search for users by name or email within your tenant.
• Search for groups (IAM roles) within your tenant.
• Select the role to grant: Editor, Viewer, or Executor (Owners cannot be added via the modal — use the API for ownership transfer).
• See the current access list with each actor's role.

Grant Access API

POST /api/processes/{processId}/access
Authorization: Bearer {ownerToken}
Content-Type: application/json

{
  "actorId"   : "user-abc123",
  "actorType" : "User",          // "User" or "Group"
  "role"      : "Editor"         // "Owner" | "Editor" | "Viewer" | "Executor"
}

Response (201 Created):

{
  "id"        : "policy-guid",
  "processId" : "{processId}",
  "actorId"   : "user-abc123",
  "actorType" : "User",
  "role"      : "Editor",
  "grantedBy" : "user-owner456",
  "grantedAt" : "2026-05-25T10:00:00Z"
}

Grant to a Group

POST /api/processes/{processId}/access

{
  "actorId"   : "group-hr-team",
  "actorType" : "Group",
  "role"      : "Viewer"
}

List Current Access

GET /api/processes/{processId}/access

Response:
[
  { "actorId": "user-abc", "actorType": "User", "role": "Owner",    "grantedAt": "..." },
  { "actorId": "user-xyz", "actorType": "User", "role": "Editor",   "grantedAt": "..." },
  { "actorId": "group-hr", "actorType": "Group","role": "Viewer",   "grantedAt": "..." }
]