- Introduction
- Getting started
- Building with Maestro BPMN
- Understanding Maestro BPMN modeling
- Opening the modeling canvas
- Modeling your process
- Aligning and connecting BPMN elements
- Autopilot for Maestro (Preview)
- Process Repository
- Implementing a simple BPMN process
- Implementing a complex BPMN process
- Debugging
- Simulating
- Evaluations (Preview)
- Common implementation scenarios
- Building with Maestro Case
- Introduction to Maestro Case
- Maestro BPMN vs. Maestro Case: when to use case management
- The Maestro Case lifecycle: from event trigger to app experience
- Build your first case with Maestro Case
- Build a Maestro Case with a coding agent (preview)
- Defining case keys (system vs. external)
- Establishing task I/O and write-back contracts
- Exit rules and early stage termination
- Modeling primary and secondary stages
- Triggering a case from Data Fabric
- Implementing stage-level personas and permissions
- Setting SLAs and automated escalation rules
- Configuring a rework loop (re-entry)
- Configuring and testing the Case Manager Agent (preview)
- Case Manager input and output contract
- Maestro Case component dictionary
- Building with Maestro Flow
- Maestro Automate
- Integrations
- Operating
- Monitoring
- Optimizing
- Reference information
Checklist of requirements for Maestro, covering tenant enablement, Studio Web system requirements, and environment readiness before getting started.
Maestro is based on UiPath® Studio Web. For Studio Web requirements, check Automation Cloud System Requirements.
Use this checklist to verify your environment is ready for Maestro. It covers tenant enablement, user roles and app permissions, and Unattended licensing across tenant, machine template, and folder. Missing any item can result in pending jobs or a disabled Open in Process Mining button.
Orchestrator permissions
You need the following permissions in the Orchestrator folder where the Maestro process is published:
- Processes.view and Processes.edit — to view or edit Maestro processes.
- Jobs.view and Jobs.edit — to view or edit process instances (jobs). You can grant equivalent permissions at the folder level. For more detauls, check Default roles and permissions.
Minimum permissions for Case Management execution
This section lists the folder-level Orchestrator permissions needed to execute a Maestro Case Management process — starting cases, driving them through stages, completing tasks, and viewing case data. The built-in Automation User role covers most of these by default, but is missing a few permissions required at runtime.
Maestro Case Management processes are driven from one of two execution surfaces, each using a different permission family:
- Maestro operate view — the default surface for operators and developers. Uses the Jobs permission family.
- Case Apps — an alternative surface for business users. Uses the Apps permission family for the same operations.
Maestro operate view permissions
| Permission | Purpose | In Automation User by default |
|---|---|---|
| Jobs.view | View case state, stages, and execution history. | Yes |
| Jobs.create | Start or signal a case through message start or intermediate events. | Yes |
| Jobs.edit | Drive the case: reopen, select the next stage, submit events, or cancel, pause, resume, and retry. | Yes |
| Actions.view, Actions.create, Actions.edit | View and complete the human-in-the-loop Action Center tasks that the case creates. | Yes |
| Processes.view | Read the process definition backing the case. | Yes |
| Assets.view | View asset-backed values unmasked. | Yes |
| Connections.view | Execute calls to third-party integrations through Integration Service. | Yes |
| Triggers.view, Triggers.create | Register a trigger at runtime when a case pauses on a wait-for-trigger step. | No — add manually |
| Logs.view | View variable values in the Maestro operate view. Can be omitted for fully automated, headless execution. | No — add manually |
A case that pauses on a wait-for-trigger step registers a trigger at runtime. Without Triggers.create, this step fails with a 403 error. This requirement does not surface in a permission audit — it only appears once the case reaches the wait step.
Case Apps permissions
If users work through a Case App instead of the Maestro operate view, the same operations require Apps permissions instead of Jobs permissions:
| Permission | Purpose | In Automation User by default |
|---|---|---|
| Apps.view | View the case and its tasks. | Yes |
| Apps.edit | Reopen, select the next stage, or cancel the case. | No — add manually |
| Apps.create | Send a message to start or signal the case. | No — add manually |
Recommended setup
Start from the built-in Automation User role and add:
- Triggers.view and Triggers.create
- Logs.view
- Apps.view, Apps.edit, and Apps.create — only if users work through a Case App
Permissions not required
The following are not required to execute a Case Management process: Jobs.delete, Processes.edit, and create, edit, or delete permissions on Assets, Queues, Connections, and Storage Buckets.
Starting a case from Orchestrator is authorized by Orchestrator using the starting user's permissions. Maestro does not re-check this authorization.
Execution settings
For a process invoked from Maestro, manage its execution settings through Package Requirements in the deployed Agentic process. Check Linking execution settings.
Unattended runtime setup
While Maestro itself does not require allocating a runtime, jobs started by a Maestro process may require Unattended runtimes. For RPA workflows invoked via Maestro:
- At least one user or Robot account is enabled for Unattended, assigned to the tenant, and added to the target folder. Read Unattended robot setup for configuration steps, Robot accounts for service accounts, and Managing robots for folder assignment.
- Your folder has a machine template with a runtime assigned. Check Machine templates.
Optimize tab and Process Mining
- Process Mining is enabled on your tenant. Check Enabling the service in Automation Cloud.
- Existing Maestro permissions let you see the Optimize tab and access the Process Optimization app.
- To edit data transformations in the auto-created Process Optimization app, you need the Process Mining Developer role. Read Setting up the users.
- You have Edit data, Edit dashboards, and View permissions for the Process Optimization app in Process Mining. Read Managing access for Process Mining apps.