You manage users, groups, privileges, and roles on the Security page of the Administrator tool. The Service Manager stores users and groups in the domain configuration database and copies the list of users and groups to the PowerCenter repository. The Service Manager periodically synchronizes the list of users and groups in the repository with the users and groups in the domain configuration database.

When you assign privileges and roles to users and groups for the Repository Service in the Administrator tool or when you assign permissions to users and groups in the PowerCenter Client, the Repository Service stores the privilege, role, and permission assignments with the list of users and groups in the repository.

You manage permissions for repository objects in the PowerCenter Client. Permissions control access to folders and objects in the repository. Even if a user has the privilege to perform certain actions, the user may also require permission to perform the action on a particular object. If the Integration Service uses operating system profiles, the user that runs the workflow must have permission on the operating system profile that is assigned to the workflow or folder that contains the workflow.

To secure data in the repository, you can create folders in the Repository Manager and assign permissions to them. When you create a folder, you are the owner of the folder by default. The owner has all permissions, which you cannot change. The owner can assign permissions to users, groups, operating system profiles, and others in the repository. If the Integration Service uses operating system profiles, an operating system profile must be assigned to the folder to run workflows.