Table of Contents

  1. About the Security Guide
  2. Introduction to Informatica Security
  3. User Authentication
  4. LDAP Security Domains
  5. Kerberos Authentication
  6. Domain Security
  7. SAML Authentication for Informatica Web Applications
  8. Security Management in Informatica Administrator
  9. Users and Groups
  10. Privileges and Roles
  11. Permissions
  12. Audit Reports
  13. Command Line Privileges and Permissions
  14. Custom Roles
  15. Default List of Cipher Suites

Security Guide

Security Guide

Global Objects Privilege Group

Global Objects Privilege Group

Privileges in the Global Objects privilege group and PowerCenter repository object permissions determine actions users can perform on the following global objects:
  • Connection objects
  • Deployment groups
  • Labels
  • Queries
Some global object tasks are determined by global object ownership and the Administrator role, not by privileges or permissions. The global object owner or a user assigned the Administrator role for the PowerCenter Repository Service can complete the following global object tasks:
  • Configure global object permissions.
  • Change the global object owner.
  • Delete the global object.
Users assigned permissions but no privileges can perform some actions for global objects. The following table lists the actions that users can perform when they are assigned permissions only:
Permission
Description
Read on connection object
User is able to view connection objects.
Read on deployment group
User is able to view deployment groups.
Read on label
User is able to view labels.
Read on query
User is able to view object queries.
Read and Write on connection object
User is able to edit connection objects.
Read and Write on label
User is able to edit and lock labels.
Read and Write on query
User is able to edit and validate object queries.
Read and Execute on query
User is able to run object queries.
Read on folder
Read and Execute on label
User is able to apply labels and remove label references.
To perform actions on global objects, users must also have the appropriate privilege in the Tools privilege group.

Updated May 17, 2019


Explore Informatica Network