Which statement describes how access to application components is typically granted in Appian?

• A. Access is granted to individuals
• B. Access to components is assigned to groups
• C. Groups have no access
• D. Access is granted by external roles

Answer: (B)

In Appian, access to components is controlled by security settings that are applied to groups. You assign permissions (such as Read, Write, or Admin) to a group, and every user who is a member of that group inherits those permissions. This group-based approach scales well, because when people join or leave a team you only adjust group membership rather than changing permissions for many individual users. Granting access to individuals is possible but not the typical or most efficient practice for large or dynamic teams. The statement that groups have no access contradicts the standard practice, since groups are the primary way access is granted. External roles exist in some contexts, but the normal mechanism for granting component access relies on groups and the permissions assigned to them.