AT:

• I can only run commands for process instances which belongs to one of the authenticated tenants
• if no authenticated tenant id is set then I can only run commands for instances which belongs to no tenant
• if no authentication is set (i.e. no user id) then I can run commands for all instances

Commands:

• deleteProcessInstance
• getActiveActivityIds
• getActivityInstance
• get / set / remove variables

• Task variables
• Execution variables
• Task form variables
• Start form variables

• process instance modification