Certified Pega Senior System Architect 23 PEGACPSSA23V1 Exam Questions with Experts Answers Updated Recently

In Access Control Policies, attributes like Appointment date (A) and Number of dependents (B) can be used to define conditions for data access. These attributes can be part of case data or user profiles and serve as criteria for determining access levels. For example, an access control policy can restrict access to certain case information based on the appointment date or allow access to specific functionalities based on the number of dependents associated with a user profile.References: Pega Community documentation on Access Control Policies.

Graphical user interface Description automatically generated

To match the security solutions to their appropriate use cases:

• "Access of Role to Object" is typically used to specify what actions a particular role can perform on instances of a class. It would be appropriate for a use case where "Dealers can modify evaluations" since this is an action that a specific role (dealers) would be allowed to perform.
• "Access Control Policy" allows defining rules that enforce property and case access restrictions based on the user role and other conditions. It would be appropriate for a use case where "Customers can only view their own credit report" since this would be a restriction based on user-specific data.
• "Access Deny" is used to explicitly deny access to a rule or data instance. It fits the use case where "Dealers cannot run reports" because it is a restriction that prevents a specific action (running reports) for a specific role (dealers).
• "Access when" is a rule that defines conditions for whether certain access is allowed. It would be used in the scenario where "Dealers cannot modify orders in the Fulfillment stage" since this is a conditional restriction based on the stage of the process.

Based on these explanations, here is the matched list:

• Access when -> Dealers cannot modify orders in the Fulfillment stage.
• Access Control Policy -> Customers can only view their own credit report.
• Access Deny -> Dealers cannot run reports.
• Access of Role to Object -> Dealers can modify evaluations.