Subscription access

what is subscription access group automation? subscription access group automation creates customer access groups during subscription (via broker or subscription flow) and assigns predefined iam roles to those groups what is the purpose of this feature? this feature standardizes role based access control for workflows during subscription and ensures personas receive appropriate permissions without manual configuration what happens when a customer subscribes to ? when a customer subscribes to , the system automatically creates required customer access groups maps each access group to the correct role enables the groups for use by workflow service (workflowsvc) which personas and roles are supported? supported personas and roles are as follows \<font color="#f3f4f6"> c \</font> \<font color="#f3f4f6"> cmm persona \</font> \<font color="#f3f4f6"> iam role \</font> \<font color="#f3f4f6"> access group \</font> owner ccmmevidencecontrolowner ccmm evidence control owner approver ccmmevidenceapprover ccmm evidence approver reviewer ccmmevidencereviewer ccmm evidence reviewer support admin ccmmsupportadmin ccmm support admin administrator ccmmadmin ccmm administrator viewer ccmmviewer ccmm viewer are access groups created automatically? yes access groups are automatically created during the ccmm subscription process and mapped to the corresponding roles can existing subscriptions use this feature? existing subscriptions are not automatically updated if new access groups are required, users must unsubscribe and resubscribe to for the updated configuration to reflect who is responsible for role creation? the application team is responsible for creating iam roles and defining associated permissions how are roles used in workflows? once assigned, roles are inherited by users added to the respective access groups the workflow service (workflowsvc) uses these roles to execute workflows based on assigned permissions does this change require any manual configuration from customers? no manual configuration is required for new subscriptions access group creation and role assignments are handled automatically during the subscription process