Security Guide

Back Next

Creating an Operating System Profile

Create an operating system profile and assign it to users and groups to increase security and to isolate the run-time user environment. You can create one or more operating system profiles. The PowerCenter Integration Service uses the operating system profile to run workflows. The Data Integration Service uses the operating system profile to run mappings, profiles, and workflows. The Metadata Access Service uses the operating system profile to access Hadoop connection information to import and preview metadata.

In the Administrator tool, click the

Security

tab.

On the Security Actions menu, click

Create Operating System Profile

The

Create Operating System Profile - Step 1 of 3

dialog box appears.

Enter the following general properties for the operating system profile:

Property	Description
Name	Name of the operating system profile. The name is not case sensitive and must be unique within the domain. It cannot exceed 128 characters or begin with @. It also cannot contain the following special characters: % * + \ / ? ; < > The name can contain an ASCII space character except for the first and last character. All other space characters are not allowed.
System User Name	Name of an operating system user that exists on the machines where the Integration Service runs. The Integration Service runs workflows or jobs using the system access of the system user defined for the operating system profile. When you create operating system profiles, you cannot specify the system user name as root or use a non-root user with uid==0.

Click

The

Configure Operating System Profile - Step 2 of 3

dialog box appears.

Select the service that will use the operating system profile.

PowerCenter Integration Service

Data Integration Service

Metadata Access Service

Configure the operating system profile properties for the selected services. To create an operating system profile for the Metadata Access Service, you must also select Data Integration Service along with Metadata Access Service and specify the $DISRootDir variable for the Data Integration Service.

If the services access a Hadoop environment at design time or at run time, configure the Hadoop impersonation properties as follows:

Select

Enable Hadoop Impersonation Properties

Choose to use the logged in user or specify a Hadoop impersonation user to run Hadoop jobs.

Optionally, configure the environment variables.

If the Analyst Service connects to a Data Integration Service that uses operating system profiles, configure the Analyst Service properties.

Click

The

Assign Groups and Users to Operating System Profile - Step 3 of 3

dialog box appears.

In the

Groups

tab, assign groups to the operating system profile as follows:

To assign specific groups to the operating system profile, select one or more groups and click

Add

To assign all available groups to the operating system profile, click

Add All

Optionally, assign the operating system profile as the default profile to one or more groups. To assign a default profile, select

Default Profile

for the group in the Selected Group(s) list.

In the

Users

tab, assign users to the operating system profile as follows:

To assign specific users to the operating system profile, select one or more users and click

Add

To assign all available users to the operating system profile, click

Add All

Optionally, assign the operating system profile as the default profile to one or more users. To assign a default profile, select

Default Profile

for the user in the Selected User(s) list.

Click

Finish

After you create the operating system profile, the details panel displays the properties of the operating system profile and the groups and users that the profile is assigned to.

Rename Saved Search

Table of Contents

Security Guide

Security Guide

Creating an Operating System Profile

Creating an Operating System Profile