Administration
Here, further information on the installation and on the role concept of Action Engine is provided.
Installation
Action Engine can be used in any infrastructure scenario, regardless of whether the Celonis Process Mining application is in the cloud or on-premise.
Full cloud / hybrid setting: the only requirement for using the Action Engine is an Action Engine license to activate the feature.
On-premise setup: a Celonis cloud team with (at least) the Action Engine feature activated must be requested. Then, the on-premise Celonis application and the cloud team must be linked by means of the Uplink connection.
User Roles
For the Action Engine application, there exist two permissions:
The My Inbox permission allows accessing the My Inbox site, which is all that is required for a business user. It is possible to interact with existing Signals the business user is subscribed to (read, assign, comment, etc.).
The Manage Skill permission is required for the Action Engine configuration. It is possible to create Projects, within those create and edit Skills as well as Routing Rules, and give permissions to others to also edit Skills within created Projects.
The Access All Projects permission allows to access all existing Projects and the Skills as well as Routing Rules within.
All permissions can be set as explained in Permissions. To set Manage Skill permissions or Access All Projects permissions for a user, Team role Analyst is required.
Data Permissions
Please note that "Manage Skill" permissions allow a user to create Skills on data models (only those the user has permissions to access) without consideration of data permissions.
Authorization concept
In the Action Engine context, authorizations for end-users are handled via the routing rule concept. Users with Manage Skill permission can define which user will be subscribed to which Signal, based e.g. on the attribute of a defined data model column. For this reason, routing rules can be centrally managed and reused.
On-premise scenario
In the Uplink connection scenario, an additional layer of access restriction exists: All communication between the cloud team and the on-premise Celonis application is handled by an on-premise user called Uplink User. Depending on the Uplink User’s local authorization, only some data models might be accessible for executing Skills.
A user with Manage Skill permissions can create new Projects and create skills for these Projects. When creating a skill, the user can choose from the data models to which they have access. Permissions on Projects can be set to allow other users to edit skills in these projects. The View All Projects permission allows users to access skills in all projects.
Data export
Action Engine provides endpoints through which you can export information about your team's Skills, Signals, and activities. These can be downloaded as Parquet files which can then be uploaded to a Data Pool to allow detailed analysis. For further information, see Action Engine Connector.