Which statement is true about security configuration in Appian?

• A. Security is configured only at the app level
• B. Security cannot be configured at the record level
• C. Security is managed exclusively by external tools
• D. Security can be configured at the record level

Answer: (D)

Appian’s security model is layered and includes record-level control. You can specify who can view or interact with individual records or record types, not just grant access to an entire application. This allows fine-grained restrictions, such as someone being able to use the app but only see certain records relevant to their role or group. That capability is what makes the statement about configuring security at the record level true. It’s not limited to app-level security, and it doesn’t rely solely on external tools—the platform provides built-in security at multiple levels, including records, apps, and folders.