UiPath-ADPv1 Orchestrator Advanced Usage — All Questions With Answers

Question 1

An Orchestrator administrator needs to trigger a process that must run on a specific machine template. What is the most efficient way to ensure the job is routed correctly without manual intervention?

Accepted Answer

Assign a specific runtime tag to the machine template and the job.. UiPath Orchestrator uses 'Tags' for organizational purposes, but job routing to specific machine templates is achieved via 'Machine Tags' or 'Targeting' settings within the Job/Trigger configuration, not by assigning a 'runtime tag' to a job. The most efficient way to route a job to a specific machine template is by using the 'Targeting' feature in the Trigger/Job creation, which allows selecting a specific Machine Template.

Answer

Hardcode the machine name in the process workflow properties.

Answer

Configure the Robot to use a static machine key.

Answer

Manually stop and start the robot service on the target machine.

Question 2

Which TWO of the following statements correctly describe the behavior of Orchestrator Queues with 'Auto-Retry' enabled?

Accepted Answer

The 'Max Retries' setting determines the limit for failed attempts.. When 'Auto-Retry' is enabled on a queue, Orchestrator will retry any transaction that fails with an Application Exception until the 'Max Retries' limit is reached. There is no configuration to ignore specific error types within the Orchestrator queue settings themselves. Option A is incorrect because the status changes to 'Retried' or 'Failed' between attempts. Option C is incorrect because a delay can be configured.

Answer

The transaction status remains 'In Progress' during retries.

Answer

Items are retried immediately without any delay.

Answer

The specific error type can be ignored by the retry logic.

Answer

Auto-retry works only for Orchestrator-orchestrated robots.

Question 3

Refer to the exhibit. This error occurs intermittently in a high-concurrency Orchestrator environment. Which Orchestrator feature should be used to prevent this conflict?

Accepted Answer

Configure the job to run only on a dedicated machine.. The correct Orchestrator feature to prevent job conflicts in high-concurrency environments is 'Job Priority' or 'Non-overlapping' scheduling, but specifically, the feature designed to handle resource contention is 'Queues' (using unique references) or 'Job Constraints'. Option B is a workaround, not an Orchestrator feature. Furthermore, the explanation mentions 'Non-Overlapping' job scheduling, which is a specific Orchestrator setting, but the option provided (B) is about dedicated machines, which is an infrastructure configuration, not an Orchestrator feature.

Answer

Increase the timeout property in the activity.

Answer

Disable the 'Auto-Retry' feature in the queue.

Answer

Add a 'Delay' activity before accessing the file.

Question 4

Which component of Orchestrator is responsible for storing and displaying log data generated by the Robots?

Accepted Answer

The Elasticsearch/Logstash/Kibana (ELK) stack (or internal DB).. While Orchestrator uses an external database (SQL Server) or an external ELK stack for log storage, these are infrastructure dependencies rather than 'components of Orchestrator'. The question is technically ambiguous or misleading in the context of UiPath architecture. Furthermore, the explanation provided in the prompt is generic and does not directly address why the other options are incorrect in the context of the Orchestrator architecture.

Answer

The Robot machine itself.

Answer

The UiPath Studio application.

Answer

The Task Scheduler.

Question 5

An automation developer is configuring an unattended queue-based process in UiPath Orchestrator. The requirement states that if a specific Business Rule Exception occurs during transaction processing, the transaction item must be immediately deferred for retry later that day rather than failing instantly. How should the developer configure this behavior using Orchestrator Queues?

Accepted Answer

Enable Auto-Retry on the queue definition in Orchestrator and use the Set Transaction Status activity with Status set to Failed and Error Type set to Business.. In UiPath, Business Rule Exceptions (BRE) do NOT trigger the Auto-Retry mechanism configured on a Queue. Auto-Retry only applies to Application Exceptions (System Exceptions). A Business Rule Exception is considered a final state for a transaction item and will not be retried by Orchestrator regardless of the Auto-Retry setting.

Answer

Use the Set Transaction Status activity with Status set to Failed, Error Type set to Application, and leave the Auto-Retry property unchecked.

Answer

Configure the queue definition with Auto-Retry enabled and use the Set Transaction Status activity with Status set to Successful and a custom progress note.

Answer

Delete the transaction item permanently from the Orchestrator queue and add a brand new queue item with a delayed Reference property.

Question 6

When designing a high-volume automation solution, you need to trigger a job based on an external system event in real-time. Which Orchestrator mechanism is most appropriate for this requirement?

Accepted Answer

Orchestrator API Polling.. To trigger an Orchestrator job in real-time based on an external system event, the external system should invoke the UiPath Orchestrator API (specifically the Jobs/Start endpoint) directly. Webhooks are used to push notifications *out* of Orchestrator to external systems, not to trigger jobs inside Orchestrator from the outside.

Answer

Orchestrator Queue Triggers.

Answer

Orchestrator Webhooks.

Answer

Scheduled Triggers.

Question 7

A finance automation team stores monthly closing reports in an Orchestrator Storage Bucket named 'FinanceReports'. The bucket uses the default configuration. The security team requires that only members of the 'Finance-Analysts' group can read these files, while all other Orchestrator users remain unable to access them. Which configuration should you apply in Orchestrator?

Accepted Answer

Assign the 'Finance-Analysts' group the Storage Files Read role at the bucket level and remove inherited permissions for all other users.. Storage Bucket permissions are managed through Orchestrator roles and folder-level role assignments. To restrict read access to a single group, you assign the Storage Files Read role at the bucket level and remove inherited access for others. This enforces least privilege and aligns with how Orchestrator handles ACLs for storage resources.

Answer

Create a new Orchestrator tenant with only the Finance-Analysts group and move the Storage Bucket to that tenant.

Answer

Enable 'Personal Workspaces' for the Finance-Analysts group so each analyst gets a private bucket.

Answer

Set the bucket to 'Read-only' and share the Orchestrator URL with the Finance-Analysts group.

Question 8

A developer is configuring a queue in Orchestrator to handle transactions that require unique reference keys to prevent duplicates. The queue has 'Unique Reference' enabled. Which two actions must the developer take to ensure that duplicate transactions are not added? (Choose two.)

Accepted Answer

Provide a unique value in the 'Reference' field when adding a queue item.. To prevent duplicate transactions, the queue must have 'Unique Reference' enabled, and each added item must include a unique reference value. These two actions together ensure that Orchestrator rejects any item with a reference that already exists in the queue.

Answer

Use the 'Add Transaction Item' activity instead of 'Add Queue Item'.

Answer

Assign the queue to a modern folder and grant the robot 'Edit' permissions.

Answer

Enable 'Auto Retry' on the queue and set the retry count to zero.

Question 9

Your organization uses a modern folder named 'Finance' with a machine template that has three unattended robots. A developer reports that a process fails with the error 'Could not find the user with the specified key' when the robot attempts to access a credential asset stored in Orchestrator. The asset is defined at the tenant level. What is the most likely cause of this error?

Accepted Answer

The robot is not provisioned in the Finance folder.. In modern folders, robots must be provisioned as users within the folder to access resources, even tenant-level assets. The 'user not found' error indicates the robot's identity is missing from the folder's user list. Ensuring the robot is correctly added to the Finance folder resolves the issue. Other options relate to different failure modes that would produce distinct error messages.

Answer

The credential asset's password has expired.

Answer

The asset is not assigned to the Finance folder.

Answer

The robot's Windows password has expired.

Question 10

A developer needs to configure a long-running unattended automation that processes invoices. The process must run every weekday at 06:00, but must not start if the previous run is still executing. Additionally, the process should run on a specific machine that has the required ERP client installed. Which Orchestrator feature should be used to meet these requirements?

Accepted Answer

Time-based trigger scheduled for 06:00 on weekdays, with the process assigned to a specific machine and a robot account with unattended privileges.. A time-based trigger in Orchestrator is the native feature for scheduling jobs at specific times and days. Assigning the process to a specific machine ensures it runs on the required hardware. The robot account must have unattended privileges to run without human intervention. This configuration directly addresses the scheduling, machine targeting, and execution context requirements.

Answer

API trigger invoked by an external scheduler that calls the Orchestrator API to start the job on a specific machine.

Answer

Time-based trigger with 'Run only if previous job is complete' option enabled, and a robot account assigned to the machine.

Answer

Queue-based trigger that starts the job when a new queue item is added, with the process restricted to a specific machine.

Question 11

You are configuring an Orchestrator Queue named 'InvoiceProcessing' to handle high volumes of transactions. The business requires that each invoice is processed exactly once, and that any item failing due to a transient application error is automatically retried up to three times before being marked as failed. Which two queue settings should you configure? (Choose two.)

Accepted Answer

Set the 'Max # of retries' property to 3.. To ensure exactly-once processing and automatic retries, you configure the queue's Unique Reference to prevent duplicates and set Max # of retries to 3 for transient failures. These two settings directly address the business requirements and are standard Orchestrator Queue configurations for high-volume, reliable automation.

Answer

Enable the 'Enforce Unique Reference' property.

Answer

Set the 'Auto Retry' property to 3.

Answer

Set the 'Retry Interval' property to 3 minutes.

Question 12

A developer wants to run a process only on a specific robot that has a unique machine name, while other robots in the same folder should not execute it. Which Orchestrator configuration should be used?

Accepted Answer

Use a machine template that includes only the target machine and assign the robot to that template.. Machine templates in Orchestrator are used to define which physical or virtual machines can host robots. By creating a template that includes only the target machine, you restrict the associated robots to that machine. When the process is deployed to a folder where only that robot is assigned via the template, it will execute exclusively on the specified machine. This is the standard way to target a specific robot based on machine name.

Answer

Create a separate folder for that robot and deploy the process only there.

Answer

Set the process to run only on the robot's machine by using a robot-specific trigger.

Answer

Configure the robot's settings to only accept processes with a specific tag.

Question 13

A developer wants to retrieve all queue items from a specific queue that have the status 'Failed' and were processed in the last 24 hours. Which Orchestrator API endpoint and filter should be used?

Accepted Answer

GET /odata/QueueItems?$filter=Status eq 'Failed' and QueueDefinitionId eq 123 and EndProcessing gt 2023-09-30T00:00:00Z and EndProcessing lt 2023-10-01T00:00:00Z. The correct filter uses both a lower and upper bound on EndProcessing to define a precise 24-hour window. This ensures that only failed items processed within that timeframe are returned. The other options either use the wrong field or lack a proper time range.

Answer

GET /odata/QueueItems?$filter=Status eq 'Failed' and QueueDefinitionId eq 123 and EndProcessing lt 2023-10-01T00:00:00Z

Answer

GET /odata/QueueItems?$filter=Status eq 'Failed' and QueueDefinitionId eq 123 and CreationTime gt 2023-09-30T00:00:00Z

Answer

GET /odata/QueueItems?$filter=Status eq 'Failed' and QueueDefinitionId eq 123 and EndProcessing gt 2023-09-30T00:00:00Z

Question 14

You are configuring a trigger in Orchestrator to start an unattended job based on a queue item being added to the 'HighPriority' queue. The trigger must only run when the queue item has a specific reference starting with 'URGENT-'. Which two actions must you perform to achieve this? (Choose two.)

Accepted Answer

In the trigger settings, set a filter condition on the item reference to match 'URGENT-*'.. To trigger a job only for queue items with a reference starting with 'URGENT-', you first create a queue trigger for the 'HighPriority' queue. Then, you configure the trigger's condition to filter items based on the reference, such as using a StartsWith expression. This combination ensures the trigger fires selectively. Other options either do not filter by reference or are irrelevant to the requirement.

Answer

Enable the 'Only run if item has a unique reference' option.

Answer

Assign the trigger to a specific robot account.

Answer

Configure the queue to use a unique reference for each item.

Question 15

A company uses Orchestrator with a Modern Folder structure. They have a process that must run on a specific machine that is part of a machine template. The machine template is assigned to the folder. A developer needs to ensure that the process only runs on that machine and not on any other machines that might be added to the template later. What should the developer configure?

Accepted Answer

Create a new machine template containing only the specific machine, and assign the process to that template.. In Modern Folders, processes are assigned to machine templates. To restrict a process to a single machine, create a dedicated machine template containing only that machine and assign the process to it. This ensures the process runs only on that machine, regardless of other machines in different templates.

Answer

Use a robot account that is only provisioned on the specific machine, and assign the process to that robot account.

Answer

Set the process's execution target to the specific machine, not the machine template.

Answer

Set the process to run only on machines with a specific tag, and tag the specific machine accordingly.

Question 16

A developer needs to configure a queue to automatically retry failed transactions a maximum of three times with a 10-minute delay between attempts. Which TWO queue settings must be configured? (Choose two.)

Accepted Answer

Auto retry. To enable automatic retries with a maximum count, you must enable 'Auto retry' and set 'Max # of retries' to 3. The 'Retry interval' is not a queue setting, so the 10-minute delay must be handled in the automation logic or via a time trigger. 'Unique reference' and 'SLA' do not affect retry behavior. Thus, the two required queue settings are 'Auto retry' and 'Max # of retries'.

Answer

Unique reference

Answer

SLA

Answer

Retry interval

Question 17

You are using Orchestrator Triggers to schedule a process that must run every weekday at 6:00 AM. The process should not run on public holidays. The company observes holidays that vary each year. Which approach should you use to meet this requirement?

Accepted Answer

Create a time-based trigger with a cron expression that runs Monday through Friday at 6:00 AM, and add a holiday calendar to the trigger.. Orchestrator's time-based triggers with cron expressions allow precise scheduling, and the holiday calendar feature lets you exclude specific dates. By combining a Monday-Friday 6:00 AM cron with a holiday calendar, you ensure the process runs only on business days and skips holidays automatically, even as holiday dates change annually.

Answer

Create a queue-based trigger that adds items only on weekdays, and set a maximum number of items to process per day.

Answer

Create a time-based trigger that runs daily at 6:00 AM, and use a conditional 'If' activity in the process to check if the current date is a holiday.

Answer

Create a time-based trigger with a cron expression that runs Monday through Friday at 6:00 AM, and manually disable the trigger on holidays.

Question 18

Your company uses Orchestrator with multiple modern folders. A developer needs to run a process that must access a credential asset stored in a different folder named 'SharedAssets'. The developer's robot is provisioned only in the 'Finance' folder. What is the most appropriate way to grant access to the credential without duplicating it?

Accepted Answer

Use a tenant-level credential asset instead of a folder-level one.. Tenant-level assets are designed to be shared across all folders in Orchestrator, making them ideal for credentials needed by multiple folders. By converting the folder-level credential to a tenant-level asset, you provide access to the Finance robot without duplicating the credential or moving it from its original folder. This approach maintains a single source of truth and simplifies management.

Answer

Create a new credential asset in the Finance folder with the same values.

Answer

Move the credential asset to the Finance folder.

Answer

Assign the robot to the SharedAssets folder as well.

Question 19

Refer to the exhibit. A user is granted this specific policy in Orchestrator. When attempting to start a job for a process in Folder 123, the user receives an 'Unauthorized' error. What is the most likely cause?

Accepted Answer

The user is missing the 'Folders.View' permission.. The policy grants permission to create a job, but it lacks the necessary 'View' permission on the process itself or the folder. Orchestrator's security model requires users to have read access to the resource (process) to initiate an action against it. Without the 'Folders.View' or 'Processes.View' permissions, the Create action fails despite having explicit job creation rights defined in the policy.

Answer

The policy requires a 'Jobs.Edit' permission.

Answer

The user must have 'Administrator' access to the folder.

Answer

The policy syntax is invalid due to the trailing asterisk.

Question 20

When implementing a high-availability Orchestrator deployment, what is the primary consideration for handling the 'Orchestrator Database' during a failover event?

Accepted Answer

Use SQL Always On Availability Groups for database replication.. In a high-availability environment, the database is the single source of truth. Orchestrator nodes are stateless, but the SQL database holds all transaction logs, queue states, and assets. Ensuring consistent replication and minimal recovery time objectives (RTO) for the SQL layer is paramount. If the database is not synchronized, the application nodes will fail to recover, regardless of how many Orchestrator nodes are active in the load balancer pool.

Answer

The SQL database must be deployed on the same server as Orchestrator.

Answer

Disable the Orchestrator load balancer during database maintenance.

Answer

Change the connection string on every robot individually.

UiPath-ADPv1 Orchestrator Advanced Usage — All Questions With Answers

An Orchestrator administrator needs to trigger a process that must run on a specific machine template. What is the most efficient way to ensure the job is routed correctly without manual intervention?

Which TWO of the following statements correctly describe the behavior of Orchestrator Queues with 'Auto-Retry' enabled?

Refer to the exhibit. This error occurs intermittently in a high-concurrency Orchestrator environment. Which Orchestrator feature should be used to prevent this conflict?

Exhibit

Which component of Orchestrator is responsible for storing and displaying log data generated by the Robots?

When designing a high-volume automation solution, you need to trigger a job based on an external system event in real-time. Which Orchestrator mechanism is most appropriate for this requirement?

A developer is configuring a queue in Orchestrator to handle transactions that require unique reference keys to prevent duplicates. The queue has 'Unique Reference' enabled. Which two actions must the developer take to ensure that duplicate transactions are not added? (Choose two.)

A developer wants to run a process only on a specific robot that has a unique machine name, while other robots in the same folder should not execute it. Which Orchestrator configuration should be used?

A developer wants to retrieve all queue items from a specific queue that have the status 'Failed' and were processed in the last 24 hours. Which Orchestrator API endpoint and filter should be used?

You are configuring a trigger in Orchestrator to start an unattended job based on a queue item being added to the 'HighPriority' queue. The trigger must only run when the queue item has a specific reference starting with 'URGENT-'. Which two actions must you perform to achieve this? (Choose two.)

A developer needs to configure a queue to automatically retry failed transactions a maximum of three times with a 10-minute delay between attempts. Which TWO queue settings must be configured? (Choose two.)

You are using Orchestrator Triggers to schedule a process that must run every weekday at 6:00 AM. The process should not run on public holidays. The company observes holidays that vary each year. Which approach should you use to meet this requirement?

Refer to the exhibit. A user is granted this specific policy in Orchestrator. When attempting to start a job for a process in Folder 123, the user receives an 'Unauthorized' error. What is the most likely cause?

Exhibit

When implementing a high-availability Orchestrator deployment, what is the primary consideration for handling the 'Orchestrator Database' during a failover event?

Which Orchestrator feature is best suited for sharing sensitive credentials between multiple processes without exposing them in plain text or hardcoding them in workflows?

Which THREE actions are required to successfully enable and utilize 'Modern Folders' in a fresh Orchestrator installation?

An administrator wants to ensure that a specific process only runs during non-business hours. How should this be configured in Orchestrator?

When migrating a process from a development environment to a production environment using Orchestrator, what is the best practice for managing environment-specific configurations?

Which mechanism does Orchestrator use to ensure that the 'Queue Item' processing is handled in a First-In-First-Out (FIFO) manner across multiple robots?

How can an Orchestrator administrator identify the root cause of a 'System Exception' occurring during the execution of a process?

Refer to the exhibit. What is the impact of this Orchestrator policy on a folder containing 10 available robots?

Exhibit

Which Orchestrator feature should be used to monitor the long-term health and performance of unattended robot processes?

You need to automate the deployment of processes to multiple environments while ensuring that different production environments have distinct connection strings stored securely. Which Orchestrator feature should you utilize to manage these configurations efficiently?

A production process is failing because the unattended robot cannot access an Orchestrator Queue. Which TWO of the following configurations must be verified to ensure the Robot has the necessary permissions?

Refer to the exhibit. A user is attempting to perform an 'Add Transaction Item' action on a queue, but the operation fails despite having the policy shown. What is the cause of the failure?

Exhibit

Which THREE actions are required to successfully upgrade a Process version in Orchestrator while ensuring existing production jobs continue to function correctly?

An Orchestrator administrator needs to ensure that a Robot only executes processes tagged with 'Finance' while ignoring all others during high-load periods. Which configuration strategy should be implemented?

Refer to the exhibit. A developer attempts to trigger a job, but it fails immediately with the shown error. What is the most likely root cause in a Modern Folder environment?

Exhibit

Which TWO of the following are valid methods to trigger an automated process in Orchestrator using the Orchestrator API?

When utilizing Orchestrator Storage Buckets to share files across multiple robots, which security consideration is paramount to prevent unauthorized data access?

An administrator must ensure that a newly created modern folder inherits the same robot account assignments and package feed as an existing folder, without manually reconfiguring each setting. Which Orchestrator feature should be used?

An administrator needs to grant a robot account permission to read and write to a storage bucket in a modern folder, but the robot should not be able to delete any files. Which Orchestrator role configuration should be applied?

UiPath-ADPv1 Orchestrator Advanced Usage — All Questions With Answers

An Orchestrator administrator needs to trigger a process that must run on a specific machine template. What is the most efficient way to ensure the job is routed correctly without manual intervention?

Which TWO of the following statements correctly describe the behavior of Orchestrator Queues with 'Auto-Retry' enabled?

Refer to the exhibit. This error occurs intermittently in a high-concurrency Orchestrator environment. Which Orchestrator feature should be used to prevent this conflict?

Exhibit

Which component of Orchestrator is responsible for storing and displaying log data generated by the Robots?

When designing a high-volume automation solution, you need to trigger a job based on an external system event in real-time. Which Orchestrator mechanism is most appropriate for this requirement?

A developer is configuring a queue in Orchestrator to handle transactions that require unique reference keys to prevent duplicates. The queue has 'Unique Reference' enabled. Which two actions must the developer take to ensure that duplicate transactions are not added? (Choose two.)

A developer wants to run a process only on a specific robot that has a unique machine name, while other robots in the same folder should not execute it. Which Orchestrator configuration should be used?

A developer wants to retrieve all queue items from a specific queue that have the status 'Failed' and were processed in the last 24 hours. Which Orchestrator API endpoint and filter should be used?

You are configuring a trigger in Orchestrator to start an unattended job based on a queue item being added to the 'HighPriority' queue. The trigger must only run when the queue item has a specific reference starting with 'URGENT-'. Which two actions must you perform to achieve this? (Choose two.)

A developer needs to configure a queue to automatically retry failed transactions a maximum of three times with a 10-minute delay between attempts. Which TWO queue settings must be configured? (Choose two.)

You are using Orchestrator Triggers to schedule a process that must run every weekday at 6:00 AM. The process should not run on public holidays. The company observes holidays that vary each year. Which approach should you use to meet this requirement?

Refer to the exhibit. A user is granted this specific policy in Orchestrator. When attempting to start a job for a process in Folder 123, the user receives an 'Unauthorized' error. What is the most likely cause?

Exhibit

When implementing a high-availability Orchestrator deployment, what is the primary consideration for handling the 'Orchestrator Database' during a failover event?

Which Orchestrator feature is best suited for sharing sensitive credentials between multiple processes without exposing them in plain text or hardcoding them in workflows?

Which THREE actions are required to successfully enable and utilize 'Modern Folders' in a fresh Orchestrator installation?

An administrator wants to ensure that a specific process only runs during non-business hours. How should this be configured in Orchestrator?

When migrating a process from a development environment to a production environment using Orchestrator, what is the best practice for managing environment-specific configurations?

Which mechanism does Orchestrator use to ensure that the 'Queue Item' processing is handled in a First-In-First-Out (FIFO) manner across multiple robots?

How can an Orchestrator administrator identify the root cause of a 'System Exception' occurring during the execution of a process?

Refer to the exhibit. What is the impact of this Orchestrator policy on a folder containing 10 available robots?

Exhibit

Which Orchestrator feature should be used to monitor the long-term health and performance of unattended robot processes?

You need to automate the deployment of processes to multiple environments while ensuring that different production environments have distinct connection strings stored securely. Which Orchestrator feature should you utilize to manage these configurations efficiently?

A production process is failing because the unattended robot cannot access an Orchestrator Queue. Which TWO of the following configurations must be verified to ensure the Robot has the necessary permissions?

Refer to the exhibit. A user is attempting to perform an 'Add Transaction Item' action on a queue, but the operation fails despite having the policy shown. What is the cause of the failure?

Exhibit

Which THREE actions are required to successfully upgrade a Process version in Orchestrator while ensuring existing production jobs continue to function correctly?

An Orchestrator administrator needs to ensure that a Robot only executes processes tagged with 'Finance' while ignoring all others during high-load periods. Which configuration strategy should be implemented?

Refer to the exhibit. A developer attempts to trigger a job, but it fails immediately with the shown error. What is the most likely root cause in a Modern Folder environment?

Exhibit

Which TWO of the following are valid methods to trigger an automated process in Orchestrator using the Orchestrator API?

When utilizing Orchestrator Storage Buckets to share files across multiple robots, which security consideration is paramount to prevent unauthorized data access?

An administrator must ensure that a newly created modern folder inherits the same robot account assignments and package feed as an existing folder, without manually reconfiguring each setting. Which Orchestrator feature should be used?

An administrator needs to grant a robot account permission to read and write to a storage bucket in a modern folder, but the robot should not be able to delete any files. Which Orchestrator role configuration should be applied?