To initiate creating Query Based Collections, a person must have the Initiator Access Level for the ProvisionSetGroup workflow.
To create Query Based Collections, a person must have an Access Level assignment with the Create operation enabled for the Query-Based Collection (SetGroup) resource type. Create is enabled on the All Access (EmpowerID Admin) Access Level, which is assigned by default to these Management Roles:
All Access (EmpowerID Admin) — All Access can execute any operation in the resource.
EmpowerID Configuration Administrator — People with this Management Role can see and manage EmpowerID admin configuration screens and settings.
Infowarning
If a user has access to run the workflow but not create the Query Based Collection, EmpowerID routes the request to users with the needed Access Level or role.