Robot access control and governance for robotic process automation

1 . One or more non-transitory computer-readable media storing a computer program for performing access control and governance for automation, the computer program configured to cause at least one processor to:

display a package management interface comprising packages that may be accessed by activities of a workflow of a designer application;

prevent a user of the designer application from modifying permitted packages or adding new packages that are not permitted based on access control and governance policy rules;

analyze the activities of the workflow of the designer application against the access control and governance policy rules by running a series of rules that inspect the activities of the workflow, the workflow comprising an execution order and a relationship between the activities;

responsive to one or more analyzed activities of the workflow violating the access control and governance policy rules, prevent generation of the automation or publication of the workflow until the workflow satisfies the access control and governance policy rules; and

responsive to the analyzed activities of the workflow complying with all required access control and governance policy rules, generate the automation implementing the workflow or publish the workflow, wherein

the access control and governance policy rules cannot be modified by a user of the designer application.

2 . The one or more non-transitory computer-readable media of claim 1 , wherein responsive to the one or more analyzed activities of the workflow violating the access control and governance policy rules, the computer program is configured to cause the at least one processor to:

generate a notification corresponding to a severity specified in a governance policy.

3 . The one or more non-transitory computer-readable media of claim 1 , wherein an installation script for the designer application installs the access control and governance policy rules on a computing system.

4 . The one or more non-transitory computer-readable media of claim 1 , wherein the access control and governance policy rules comprise application and/or universal resource locator (URL) restrictions, package restrictions, activity restrictions, and activity property requirements.

5 . The one or more non-transitory computer-readable media of claim 1 , wherein the analysis of the activities of the workflow comprises verifying whether one or more libraries to be accessed in a workflow activity are included in a whitelist or not included in a blacklist.

6 . The one or more non-transitory computer-readable media of claim 1 , wherein the computer program instructions are further configured to cause the at least one processor to:

download the access control and governance policy rules from a conductor application.

7 . The one or more non-transitory computer-readable media of claim 1 , wherein the access control and governance policy rules comprise controls on which applications and/or universal resource locators (URLs) are automated, controls on what activities are used in the workflow, controls on what packages are used for the workflow, or a combination thereof.

8 . The one or more non-transitory computer-readable media of claim 1 , wherein the access control and governance policy rules are defined for the designer application based on an organization, a role, a group, an individual developer, or a combination thereof.

9 . The one or more non-transitory computer-readable media of claim 1 , wherein the computer program is further configured to cause the at least one processor to:

display a code analyzer settings interface that lists the access control and governance policy rules.

10 . The one or more non-transitory computer-readable media of claim 1 , wherein the access control and governance policy rules comprise one or more application and/or universal resource locator (URL) restrictions, one or more package restrictions, one or more activity restrictions, one or more activity property requirements, or a combination thereof.

11 . A computer-implemented method for performing access control and governance for automation, comprising:

displaying a package management interface comprising packages that may be accessed by activities of a workflow, by a designer application;

preventing a user of the designer application from modifying permitted packages or adding new packages that are not permitted based on the access control and governance policy rules, by the designer application;

analyzing activities of the workflow of the designer application against the access control and governance policy rules by running a series of rules that inspect the activities of the workflow, by a code analyzer of a computing system, the workflow comprising an execution order and a relationship between the activities; and

responsive to one or more analyzed activities of the workflow violating the access control and governance policy rules, preventing generation of the automation or publication of the workflow until the workflow satisfies the access control and governance policy rules, by the code analyzer of the computing system, wherein

the code analyzer is computer code that automatically runs the access control and governance policy rules as a series of rules that inspect the code written by a user, and

the access control and governance policy rules cannot be modified by a user of the designer application.

12 . The computer-implemented method of claim 11 , further comprising:

responsive to the analyzed activities of the workflow complying with all required access control and governance policy rules, generating the automation implementing the workflow or publishing the workflow, by the designer application.

13 . The computer-implemented method of claim 11 , wherein responsive to the one or more analyzed activities of the workflow violating the access control and governance policy rules, the method further comprises:

generating a notification corresponding to a severity specified in a governance policy, by the code analyzer of the computing system.

14 . The computer-implemented method of claim 11 , wherein the access control and governance policy rules comprise application and/or universal resource locator (URL) restrictions, package restrictions, activity restrictions, and activity property requirements.

15 . The computer-implemented method of claim 11 , wherein the access control and governance policy rules comprise controls on which applications and/or universal resource locators (URLs) are automated, controls on what activities are used in the workflow, controls on what packages are used for the workflow, or a combination thereof.

16 . The computer-implemented method of claim 11 , further comprising:

displaying a code analyzer settings interface that lists the access control and governance policy rules, by the designer application.

17 . The computer-implemented method of claim 11 , wherein the access control and governance policy rules comprise one or more application and/or universal resource locator (URL) restrictions, one or more package restrictions, one or more activity restrictions, one or more activity property requirements, or a combination thereof.

18 . One or more computing systems, comprising:

memory storing computer program instructions for performing access control and governance for automation; and

at least one processor configured to execute the computer program instructions, wherein the computer program instructions are configured to cause the at least one processor to:

display a package management interface comprising packages that may be accessed by activities of a workflow of a designer application;

prevent a user of the designer application from modifying permitted packages or adding new packages that are not permitted based on access control and governance policy rules;

analyze activities of the workflow of the designer application against the access control and governance policy rules by running a series of rules that inspect the activities of the workflow, the workflow comprising an execution order and a relationship between the activities;

responsive to one or more analyzed activities of the workflow violating the access control and governance policy rules, prevent generation of the automation or publication of the workflow until the workflow satisfies the access control and governance policy rules; and

responsive to the analyzed activities of the workflow complying with all required access control and governance policy rules, generate the automation implementing the workflow or publish the workflow, wherein

the access control and governance policy rules comprise one or more application and/or universal resource locator (URL) restrictions, one or more package restrictions, one or more activity restrictions, one or more activity property requirements, or a combination thereof,

the access control and governance policy rules are defined for the designer application based on an organization, a role, a group, an individual developer, or a combination thereof, and

the access control and governance policy rules cannot be modified by a user of the designer application.

19 . The one or more computing systems of claim 18 , wherein responsive to the one or more analyzed activities of the workflow violating the access control and governance policy rules, the computer program instructions are configured to cause the at least one processor to:

generate a notification corresponding to a severity specified in a governance policy.

20 . The one or more computing systems of claim 18 , wherein the analysis of the activities of the workflow comprises verifying whether one or more libraries to be accessed in a workflow activity are included in a whitelist or not included in a blacklist.

21 . The one or more computing systems of claim 18 , wherein the computer program instructions are further configured to cause the at least one processor to:

display a code analyzer settings interface that lists the access control and governance policy rules.