Security Guide

Back Next

Run-time Objects Privilege Group

Privileges in the Run-time Objects privilege group, PowerCenter repository object permissions, and domain object permissions determine actions users can perform on the following run-time objects:

Session configuration objects

Tasks

Workflows

Worklets

Some run-time object tasks are determined by the Administrator role, not by privileges or permissions. A user assigned the Administrator role for the PowerCenter Repository Service can delete a PowerCenter Integration Service from the Navigator of the Workflow Manager.

Users assigned permissions but no privileges can perform some actions for run-time objects. The following table lists the actions that users can perform when they are assigned permissions only:

Permission	Description
Read on folder	User is able to perform the following actions: Compare run-time objects. Export run-time objects. Receive PowerCenter repository notification messages. Search for run-time objects. Use mapping parameters and variables in a session. View run-time objects, run-time object dependencies, and run-time object history.
Read and Execute on folder	Stop and abort tasks and workflows started by their own user account. When the PowerCenter Integration Service runs in safe mode, users must have the Administrator role for the associated PowerCenter Repository Service.