Permissions READ_HISTORY and DELETE_HISTORY on process definition resource.

• READ_HISTORY allows a user to see all historic process instances, historic act instances, historic task instances, variables ... of a given process definition
• DELETE_HISTORY allows a user to delete all historic process instances, historic act instances, historic task instances, variables ... of a given process definition

Note: This does not allow restricting history access on a per process instance / task instance level.

No authorizations are checked for

• standalone tasks
• variables and details related to standalone tasks
• user operation log entries related to standalone tasks and standalone jobs
• standalone jobs
• comments
• attachments
• case instances (and related resources)