- Introduction
- Getting started
- Process modeling with BPMN
- Process modeling with Case Management
- Defining case keys (system vs. external)
- Establishing task I/O and write-back contracts
- Exit rules and early stage termination
- Modeling primary and secondary stages
- Triggering a case from Data Fabric
- Implementing stage-level personas and permissions
- Setting SLAs and automated escalation rules
- Configuring a rework loop (re-entry)
- Managing live case instances: pause, migrate, and retry
- Case Manager input and output contract
- Maestro case management component dictionary
- Process modeling with Flow
- Process implementation
- Debugging
- Simulating
- Publishing and upgrading agentic processes
- Common implementation scenarios
- Extracting and validating documents
- Process operations
- Process monitoring
- Process optimization
- Reference information
Checklist of requirements for Maestro, covering tenant enablement, Studio Web system requirements, and environment readiness before getting started.
Maestro is based on UiPath® Studio Web. For Studio Web requirements, check Automation Cloud System Requirements.
Use this checklist to verify your environment is ready for Maestro. It covers tenant enablement, user roles and app permissions, and Unattended licensing across tenant, machine template, and folder. Missing any item can result in pending jobs or a disabled Open in Process Mining button.
Orchestrator permissions
You need the following permissions in the Orchestrator folder where the Maestro process is published:
- Processes.view and Processes.edit — to view or edit Maestro processes.
- Jobs.view and Jobs.edit — to view or edit process instances (jobs). You can grant equivalent permissions at the folder level. For more detauls, check Default roles and permissions.
Minimum permissions for Case Management execution
This section lists the folder-level Orchestrator permissions needed to execute a Maestro Case Management process — starting cases, driving them through stages, completing tasks, and viewing case data. The built-in Automation User role covers most of these by default, but is missing a few permissions required at runtime.
Maestro Case Management processes are driven from one of two execution surfaces, each using a different permission family:
- Maestro operate view — the default surface for operators and developers. Uses the Jobs permission family.
- Case Apps — an alternative surface for business users. Uses the Apps permission family for the same operations.
Maestro operate view permissions
| Permission | Purpose | In Automation User by default |
|---|---|---|
| Jobs.view | View case state, stages, and execution history. | Yes |
| Jobs.create | Start or signal a case through message start or intermediate events. | Yes |
| Jobs.edit | Drive the case: reopen, select the next stage, submit events, or cancel, pause, resume, and retry. | Yes |
| Actions.view, Actions.create, Actions.edit | View and complete the human-in-the-loop Action Center tasks that the case creates. | Yes |
| Processes.view | Read the process definition backing the case. | Yes |
| Assets.view | View asset-backed values unmasked. | Yes |
| Connections.view | Execute calls to third-party integrations through Integration Service. | Yes |
| Triggers.view, Triggers.create | Register a trigger at runtime when a case pauses on a wait-for-trigger step. | No — add manually |
| Logs.view | View variable values in the Maestro operate view. Can be omitted for fully automated, headless execution. | No — add manually |
A case that pauses on a wait-for-trigger step registers a trigger at runtime. Without Triggers.create, this step fails with a 403 error. This requirement does not surface in a permission audit — it only appears once the case reaches the wait step.
Case Apps permissions
If users work through a Case App instead of the Maestro operate view, the same operations require Apps permissions instead of Jobs permissions:
| Permission | Purpose | In Automation User by default |
|---|---|---|
| Apps.view | View the case and its tasks. | Yes |
| Apps.edit | Reopen, select the next stage, or cancel the case. | No — add manually |
| Apps.create | Send a message to start or signal the case. | No — add manually |
Recommended setup
Start from the built-in Automation User role and add:
- Triggers.view and Triggers.create
- Logs.view
- Apps.view, Apps.edit, and Apps.create — only if users work through a Case App
Permissions not required
The following are not required to execute a Case Management process: Jobs.delete, Processes.edit, and create, edit, or delete permissions on Assets, Queues, Connections, and Storage Buckets.
Starting a case from Orchestrator is authorized by Orchestrator using the starting user's permissions. Maestro does not re-check this authorization.
Execution settings
For a process invoked from Maestro, manage its execution settings through Package Requirements in the deployed Agentic process. Check Linking execution settings.
Unattended runtime setup
While Maestro itself does not require allocating a runtime, jobs started by a Maestro process may require Unattended runtimes. For RPA workflows invoked via Maestro:
- At least one user or Robot account is enabled for Unattended, assigned to the tenant, and added to the target folder. Read Unattended robot setup for configuration steps, Robot accounts for service accounts, and Managing robots for folder assignment.
- Your folder has a machine template with a runtime assigned. Check Machine templates.
Optimize tab and Process Mining
- Process Mining is enabled on your tenant. Check Enabling the service in Automation Cloud.
- Existing Maestro permissions let you see the Optimize tab and access the Process Optimization app.
- To edit data transformations in the auto-created Process Optimization app, you need the Process Mining Developer role. Read Setting up the users.
- You have Edit data, Edit dashboards, and View permissions for the Process Optimization app in Process Mining. Read Managing access for Process Mining apps.