# Migrate to the new access control model
EARLY ACCESS FEATURE
This documentation covers a feature currently in limited preview. The access control model is under active development and may change. To participate in early access testing, contact your Customer Success Manager to add you to the early adopters list.
Workato has introduced a new access control model that replaces legacy system and custom roles. This model separates permissions into environment roles and project roles to support flexible and environment-specific access control.
# Migrate system roles
Workato provides a built-in migration wizard to convert each legacy system role into a corresponding environment role and project role. Complete the following steps to migrate your legacy system roles:
Go to Workspace admin > Access control > Collaborator roles.
Select a deprecated system role.
Upgrade your system role
Click Upgrade system roles to launch the wizard.
Click Upgrade system roles
The wizard outlines how the legacy role splits into separate environment and project roles.
Role breakdown overview
Click Next to continue.
Review how each deprecated role maps to a new environment role and project role.
Review role assignment
You can also download a summary report for a detailed breakdown.
Click Upgrade to confirm and apply the changes. Workato deprecates the legacy roles and replaces them with the mapped roles.
# Migrate custom roles
Legacy custom roles combine workspace, environment, and project permissions in a single configuration. The new access control model separates these permissions to improve clarity and scalability. Use the custom role migration wizard to break each legacy role into an environment role and a project role.
Complete the following steps to migrate custom roles:
Go to Workspace admin > Access control > Collaborator roles.
Choose the legacy custom role you plan to upgrade.
Upgrade your custom role
Click Upgrade role to launch the wizard.
Upgrade your custom role
The wizard outlines how the legacy role splits into separate environment and project roles.
Role breakdown overview
Define the new Environment role name and choose whether to enable workspace and environment management or allow collaborators to create and manage projects.
Set up environment role
Click Next.
Define the new Project role and choose whether collaborators can manage project access, edit, and delete projects that they have access to.
Set up project role
Click Next. Workato provides a downloadable report of all updates.
Review and upgrade
Click Upgrade to complete the migration.
Last updated: 6/16/2025, 4:25:37 PM