Which statement is not true regarding security in Appian?

User rights in Appian can indeed be assigned to groups rather than just individual users. This approach allows for more efficient management of permissions. Assigning rights to groups streamlines the process, especially in larger organizations where many users may belong to the same roles or teams, and thus share similar access needs. It promotes consistent security practices and helps to ensure that users can easily inherit the appropriate permissions without needing to configure rights for each user individually.

In contrast, the other statements are true regarding security in Appian. Document security can indeed be configured at various levels, including folder, document, and object levels, providing granular control over access to sensitive information. Roles play a significant part in managing user permissions, enabling administrators to define what users can view or interact with based on their assigned roles. Additionally, access controls must align with organizational policies, ensuring that security measures are compliant with the overarching rules and guidelines established by the organization.