Skip to main content

Set up Access360

Turn on Access360Access360 The licensed add-on that connects AI assistants such as Claude, ChatGPT, and Microsoft Copilot Studio to Process Design through the Model Context Protocol (MCP). The assistant acts as the signed-in iGrafx account, with that account's permissions. for your organization, decide which repositories AI assistants can reach and who may connect, and give people the address their assistant connects to.

Prerequisites​

  • Requires the Access360Access360 The licensed add-on that connects AI assistants such as Claude, ChatGPT, and Microsoft Copilot Studio to Process Design through the Model Context Protocol (MCP). The assistant acts as the signed-in iGrafx account, with that account's permissions. license for your platform.
  • Requires a platform administrator with these server permissions:
    • Edit Server Settings, for the AI Settings page (steps 1 to 3 and 6).
    • Manage Server Roles, to create the role (step 4).
    • Manage Users and Groups, to create the group (step 4) and generate API keys (step 5).
    • Assign Server Roles, to assign the role to the group (step 4).
    • Access Support Features, to reach the REST API settings (step 5).

Steps​

  1. Go to Admin → Server Settings → AI Settings.

  2. Switch on MCP Connectivity. While it's off, Process DesignProcess Design The discipline of explicitly modeling business processes to document, analyze, and optimize them. In Process360 Live, process design is the authoring side that complements mining's data-driven view. rejects every request from an AI assistant.

  3. Choose which repositories assistants can reach. Under Repositories, click Edit, then select one:

    • All repositories — every repository, including repositories added later. This is the default.
    • Selected repositories — only the repositories you check. A repository added later stays out of reach until you select it.

    Click Save changes. The change applies to new requests from assistants. Within a reachable repository, each person still sees only what their own permissions allow.

  4. Grant the Access MCP server permission to the people who may connect an assistant. The built-in administrator roles have it from the start; nobody else does until you grant it. To control access person by person, use a dedicated role and group:

    1. In Admin → Security Roles, on the Server Roles tab, click Add server role. Give the role a name such as Access360 users and check Grant for Access MCP only.
    2. Create a group for the people who may connect, as described in Manage users and groups.
    3. On the Server Role Assignments tab, assign the role to that group, as described in Assign security roles.

    Apart from administrators, anyone outside the group can't connect an assistant, and Process DesignProcess Design The discipline of explicitly modeling business processes to document, analyze, and optimize them. In Process360 Live, process design is the authoring side that complements mining's data-driven view. rejects their requests. To give someone access, or take it away, change their group membership. A Veto for Access MCP in any of a person's roles blocks them, whatever their other roles grant.

  5. If backend services or unattended agents will connect, or people on a platform that still uses the classic iGrafx Login need a stopgap (see How Access360 signs in), turn on Allow access via API Key under Admin → Support → REST API. Then generate a key for each of those users, following the steps in Access the REST API. Access360Access360 The licensed add-on that connects AI assistants such as Claude, ChatGPT, and Microsoft Copilot Studio to Process Design through the Model Context Protocol (MCP). The assistant acts as the signed-in iGrafx account, with that account's permissions. doesn't need the API module in your license for this.

  6. Copy the address assistants connect to. Back on the AI Settings page, click the overlapping-rectangles icon at the right end of the MCP Server URL field, tooltip Copy. The address has this shape. <region> is com, eu, or jp, matching your platform's region, and the address ends in your platform's tenant ID:

    https://process-design-mcp.svc.igrafxcloud.<region>/<tenant-id>

    Share the address with the people who will connect, along with the guide for their assistant.

Verify​

Ask someone with the Access MCP permission to connect their assistant (for Claude, see Connect Claude to Access360) and ask it about a repository you made reachable. If the assistant reports that MCP connectivity is disabled or that access isn't permitted, compare its message with Access360 access controls.

Limitations​

  • An API key has no expiry date. It works until you delete it from the user's API Keys section, so delete it when a person leaves or a shared account is retired.