Security Guide

Back Next

Permissions Overview

You manage user security with privileges and permissions. Permissions define the level of access that users and groups have to an object.

Even if a user has the privilege to perform certain actions, the user may also require permission to perform the action on a particular object.

For example, a user has the Manage Services domain privilege and permission on the Development PowerCenter Repository Service, but not on the Production PowerCenter Repository Service. The user can edit or remove the Development PowerCenter Repository Service, but not the Production PowerCenter Repository Service. To manage an application service, a user must have the Manage Services domain privilege and permission on the application service.

You use different tools to configure permissions on the following objects:

Object Type	Tool	Description
Applications and application objects	Administrator tool	You can assign permissions on applications and application objects such as mappings and workflows.
Connection objects	Administrator tool Analyst tool Developer tool	You can assign permissions on connections defined in the Administrator tool, Analyst tool, or Developer tool. These tools share the connection permissions.
Domain objects	Administrator tool	You can assign permissions on the following domain objects: domain, folders, nodes, grids, licenses, application services, and operating system profiles.
Metadata Manager catalog objects	Metadata Manager	You can assign permissions on Metadata Manager folders and catalog objects.
Model repository projects	Analyst tool Developer tool	You can assign permissions on projects defined in the Analyst tool and Developer tool. These tools share project permissions.
PowerCenter repository objects	PowerCenter Client	You can assign permissions on PowerCenter folders, deployment groups, labels, queries, and connection objects.
SQL data service objects	Administrator tool	You can assign permissions on SQL data objects, such as SQL data services, virtual schemas, virtual tables, and virtual stored procedures.
Web service objects	Administrator tool	You can assign permissions on web services or web service operations.