> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flowx.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# FlowX Engine access rights

> Granular access rights can be configured for restricting access to the Engine component.

Two different access authorizations are provided, each with specified access scopes:

1. **Manage-processes** - for configuring access for running test processes

Available scopes:

* **edit** - users are able to start processes for testing and to test action rules

2. **Manage-instances** - for configuring access for manipulating process instances

Available scopes:

* **read** - users can view the list of process instances
* **admin** - users are able to retry an action on a process instance token

The Engine service is preconfigured with the following default users roles for each of the access scopes mentioned above:

* **manage-processes**
  * edit:
    * ROLE\_ADMIN\_MANAGE\_PROCESS\_EDIT
    * ROLE\_ADMIN\_MANAGE\_PROCESS\_ADMIN

  * admin:
    * ROLE\_ADMIN\_MANAGE\_PROCESS\_ADMIN

* **manage-instances**
  * read:
    * ROLE\_ENGINE\_MANAGE\_INSTANCE\_READ
    * ROLE\_ENGINE\_MANAGE\_INSTANCE\_ADMIN

  * admin:
    * ROLE\_ENGINE\_MANAGE\_INSTANCE\_ADMIN

<Check>
  These roles need to be defined in the chosen identity provider solution.
</Check>

In case other custom roles are needed, you can configure them using environment variables. More than one role can be set for each access scope.

To configure access for each of the roles above, adapt the following input:

`SECURITY_ACCESSAUTHORIZATIONS_AUTHORIZATIONNAME_SCOPES_SCOPENAME_ROLESALLOWED:NEEDED_ROLE_NAMES`

Possible values for AUTHORIZATIONNAME: MANAGEPROCESSES, MANAGEINSTANCES.

Possible values for SCOPENAME: read, edit, admin.

For example, if you need to configure role access for read, insert this:

```
SECURITY_ACCESSAUTHORIZATIONS_MANAGEINSTANCES_SCOPES_READ_ROLESALLOWED: ROLE_NAME_TEST
```


## Related topics

- [FlowX CMS access rights](/4.6.0/setup-guides/access-management/configuring-access-rights-for-cms.md)
- [FlowX.AI Engine](/4.6.0/docs/platform-deep-dive/core-components/flowx-engine.md)
- [FlowX.AI architecture](/4.6.0/docs/platform-overview/flowx-architecture.md)
- [IAM solution](/4.6.0/setup-guides/access-management/access-management-overview.md)
- [Admin access rights](/4.6.0/setup-guides/access-management/configuring-access-rights-for-admin.md)