Overview
Record Access Automation(RAA) streamlines Record-level access management in Risk Cloud by automating how User Groups are assigned to records. By mapping Select field values to specific User Groups, access can be dynamically granted based on user input—eliminating the need for manual selection.
This automation reduces user error, ensures consistent access controls, and simplifies record submission, all while still giving builders precise control over when and how access is applied.
Please note: global fields are not currently supported.
Enable User Groups
Enabling Restrict Access with User Groups in the Workflow Access Settings automatically enables the Require User Groups setting and Record Access Automation. We recommend keeping Require User Groups enabled to maintain consistent access control across all Records in the workflow.
.
Once User Groups are enabled, an empty Record Access Automation table will appear below:
The top-right counter shows how many fields are RAA-enabled, with a maximum of six select fields per workflow. As fields are enabled, their names appear in the table.
How to Configure a Field for Record Access Automation
In order to enable and configure a select field for RAA, you'll need to navigate to the step form. Once Restrict Access with User Groups is enabled in the Workflow Access Settings, all workflow select fields will display a Record Access Automation checkbox:
After that checkbox is selected, you can map each of its values to a corresponding User Group. In the example below, each Risk Type was mapped to the corresponding team, so Financial Risk was mapped to "Finance":
When all mappings are complete, click Save to retain your changes.
RAA-enabled fields are marked with a blue banner, making it easy to see which fields are in use. The banner only appears for fields that are actively placed on the step form; fields in the unused panel won’t display it.
Once the maximum of six RAA fields are reached for a workflow, you will be prevented from enabling additional fields for RAA and will need to disable one that’s already in use.
User Group Automation on Records
After Record Access Automation is configured and mapped, it will now dynamically manage User Group access based on the field selections made, ensuring consistent and automated access control without added effort from end users.
For example when "Financial" is the value chosen for Risk Type, the Finance User Group is added automatically to the Record:
If a new value is selected on the Record, the previous User Group will automatically be replaced with the User Group mapped to the newly selected value:
FAQs
Can I automate more than one field or access automation?
Yes, up to six Select field per Workflow.
Can I use other field types for access automation?
Other field types are not supported at this time.
What happens if a user selects a field value that isn’t mapped to a User Group?
If a field value has no mapping to a User Group, no access changes will be made when that value is selected unless it is replacing a previously selected value. Then, the previous User Group will be removed and no additional User Group will be applied.
What if I delete a value-to-User Group mapping?
If a mapping is removed, any User Group that was previously added to a Record via that mapping will also be removed from the Record.
What happens if I disable User Groups after RAA has been configured?
Disabling User Groups in the Workflow Access Settings will remove all User Groups that were added to Records via RAA. Manually added User Groups will remain intact.
Does RAA affect User Groups added manually to a record?
No. RAA does not alter or remove any User Groups that were manually added to a Record. These groups are independent of automation logic.
Can users manually remove User Groups that were added by RAA?
No. User Groups added via Record Access Automation cannot be manually removed from the Record by users. They can only be modified by updating or removing the field value or the mapping.
How can I tell which User Groups were added manually vs. automatically?
In the record view, User Groups added by RAA will have help text underneath stating that the User Group was granted access through the Select field. If both manually added and RAA User Groups are present on a Record, the manually added User Groups will also be listed after the User Groups added by Record Access Automation.
Will RAA apply to existing records in the Workflow?
Yes. Once RAA is configured, it will evaluate all existing records in the Workflow and add the appropriate User Groups based on the current field values and mappings.
What happens if I update or break a mapping after RAA has been configured?
Any changes or removals to the field-to-User Group mapping will be applied across all Records in the Workflow. Records will be updated to reflect the latest mapping configuration.
How does RAA interact with default User Groups at the record level?
Records that already have default User Groups assigned will retain them. RAA will add any additional User Groups as configured, without removing existing defaults.
Where can I see the changes to Record Access Automation mappings?
All Record Access Automation mapping changes and updates will appear in the Builder Activity Log (BAL), helping you track when and how User Group assignments were made.
Record Access Automation Limitations
- Using User fields to Automate User Access on a Record
- Use Multi-Select fields for Record Access Automation
- Use multiple fields for Record Access Automation