# Workflow Management Security Role: Shared Tab

{% hint style="info" %}

### Before you start

You must have **Security Roles setup** selected in the Admin tab of your own **General Access security role** before you can assign or remove permissions for any security roles.
{% endhint %}

1. Display the Workflow Management Security Role details window, if it is not already on screen.
2. Select the Menu button, then **Admin**, then select **System Administration**.
3. The System Administration window appears.
4. In the Explorer pane, expand **Security Roles**, then select **Workflow Management**.
5. The existing Workflow Management security roles are displayed.
6. Select the **Shared** tab.
7. Choose the settings you wish to assign to the security role:

<table data-header-hidden><thead><tr><th width="244"></th><th></th></tr></thead><tbody><tr><td>Workflow Analyst</td><td><p>Analysts with this role can access to workflow management in ASM Core.</p><p>Make sure you have this option selected when setting up a Workflow Management role. Deselecting it will prevent the Analyst from participating in workflow management.</p><p>The other options on this window are only enabled if this option is selected.</p></td></tr><tr><td>Available Recipient</td><td><p>Analysts with this role can have tasks and approvals forwarded to them.</p><p>They will appear on the list of available Analysts in the <strong>Forward Task Internally</strong> window.</p><p>If you deselect the option, the Analyst will not receive email messages for forwarded tasks or internal messages through the Bulletin Board</p></td></tr><tr><td>Budget</td><td>Analysts with this role can fill in budget details on a request.</td></tr><tr><td>Chart</td><td>Analysts with this role are able to pin multiple copies of charts in ASM core and on the portal.</td></tr><tr><td>View Change Calendar</td><td><p>Analysts with this role can search for and view <strong>change calendars</strong></p><p>Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>New Change Calendar</td><td><p>Analysts with this role can <strong>create new change calendars</strong> and add change windows linked to change calendars.</p><p>The previous option must be selected to enable this one. Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>Update Change Calendar</td><td><p>Analysts with this role can edit change calendars. This option also enables the <strong>Edit</strong> button on the <strong>Change Calendar Details</strong> window.</p><p>The <strong>View Change Calendar</strong> option must be selected to enable this one. Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>Delete Change Calendar</td><td><p>Analysts with this role can delete <strong>change calendars</strong> and <strong>change windows</strong></p><p>The previous option must be selected to enable this one. Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>Cancel Change Calendar Lock</td><td>Analysts with this role can override the lock that an Analyst has on a <strong>change calendar</strong></td></tr><tr><td>Allocate Requests to Change Calendar</td><td>Analysts with this role can set change calendars for CMDB items linked to a request</td></tr><tr><td>Change Calendar object Download</td><td><p>Analysts with this role can view objects attached to a change calendar</p><p>The <strong>View Change Calendar</strong> option must be selected to enable this one. Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>Change Calendar View Secure Attachments</td><td>When enabled, allows analysts with this role to view attachments using the secure PDF Viewer</td></tr><tr><td>Change Calendar Object Update</td><td><p>Analysts with this role can edit objects attached to a change calendar.</p><p>The previous option must be selected to enable this one. Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>Change Calendar Object Cancel</td><td><p>If an object attached to a change calendar has been checked out, Analysts with this role can cancel the checkout.</p><p><strong>Request Object Version Control</strong> must be selected in the Workflow Management Settings to enable this option.</p></td></tr><tr><td>Change Calendar Object Delete</td><td><p>Analysts with this role can delete objects attached to a change calendar.</p><p>Change Calendar settings also apply to the Change Window explorer option in Requests.</p></td></tr><tr><td>View Resource Manager</td><td>Analysts with this role can view the Resource Manager window, and manipulate task allocations within it.</td></tr><tr><td>View Manage CMDB Transactions</td><td>Analysts with this role can select and view <strong>Manage CMDB Task Transactions</strong> from a request and task</td></tr><tr><td>Edit Manage CMDB Transactions</td><td>Analysts with this role can select and update <strong>Manage CMDB Task Transactions</strong> from a request and task</td></tr><tr><td>Approval User of Own Request</td><td><p>Allows the analyst the ability to approve their own requests, or prevents tis capability. *This must also be set in the Self Service Portal Role for Workflow Management. <em>(Available as of 10.6.8.14701</em>). </p><p></p><p>Prior to ASM 10.6.8.14701, a User Approval was sent to the specified recipient as configured in the workflow template, without checking that the authorizing user is also the recipient set in the Task.  In most cases, this was intended behavior, however, there are some use cases where this check should occur.   Some examples may be, User Acceptance Approval tasks, User Approvals used to gather feedback, etc.  </p><ul><li><strong>If this setting is disabled,</strong> user approval tasks assigned to the Requesting User will not be available to the User.</li><li><strong>If this setting is enabled,</strong> an approval task can be sent to the same user that logged the request, effectively allowing to approve their own requests, depending on how the workflow is configured and what the approval is for.</li></ul></td></tr></tbody></table>

8. Select to save the changes and close the window. Provide the Change Reasons if prompted to do so. Alternatively, select another tab, if appropriate.
