Configuring the Terminate Process action for users
The Terminate Process action is controlled through attribute-based access control (ABAC) on the Process Instance resource. By default, users with read and update permissions can terminate processes. The action is available from both All Tasks and Worker Profile > Processes.
In some cases, you may need to prevent users from terminating processes while still allowing them to view and complete tasks. You can achieve this by using the dedicated Terminate Process ABAC field, which manages termination rights independently from other process permissions.
Steps
To disable the Terminate Process action for specific users, create a new Deny ABAC policy.
-
Log in to your Professional tenant.
-
From the left menu, go to .
The Security & Permissions table displays.
-
In the upper-right corner of the Security & Permissions table, select Create Security Policy.
The Add New Policy dialog displays.
-
In the Title field, enter a descriptive title for the policy. For example:
Deny general user terminate process
-
In the ID field, reenter the title using hyphens instead of spaces. For example:
Deny-general-user-terminate-process
-
Select Deny as the policy type.
-
Select Update as the action.
-
Select User as the actor type.
-
From the Resource Group list, select Process Instance.
-
In the Actor and Relationship tabs, select the relevant roles.
-
In the Resource tab, select Terminate Process.
Users included in the policy scope can no longer terminate processes, but they retain all other permitted access to process instances.