Security Guide

10.4.1
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5

Back Next

infacmd isp Commands

To run infacmd isp
commands, users must have one of the listed sets of domain privileges, service privileges, domain object permissions, and connection permissions.

The following table lists the required privileges and permissions for infacmd isp
commands:

infacmd isp Command	Privilege Group	Privilege Name	Permission On
AddAlertUser (for other users)	Security Administration	Manage Users, Groups, and Roles	-
AddAlertUser (for your user account)	-	-	-
AddConnectionPermissions	-	-	Grant on connection
AddDomainLink*	-	-	-
AddDomainNode	Domain Administration	Manage Nodes and Grids	Domain and node
AddGroupPrivilege	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
AddLicense	Domain Administration	Manage Services	Domain or parent folder
AddNodeResource	Domain Administration	Manage Nodes and Grids	Node
AddRolePrivilege	Security Administration	Manage Users, Groups, and Roles	-
AddServiceLevel*	-	-	-
AddUserToGroup	Security Administration	Manage Users, Groups, and Roles	-
AssignGroupPermission (on application services or license objects)	Domain Administration	Manage Services	Application service or license object
AssignGroupPermission (on domain)*	-	-	-
AssignGroupPermission (on folders)	Domain Administration	Manage Domain Folders	Folder
AssignGroupPermission (on nodes and grids)	Domain Administration	Manage Nodes and Grids	Node or grid
AssignGroupPermission (on operating system profiles)*	-	-	-
AssignISTOMMService	Domain Administration	Manage Services	Metadata Manager Service
AssignLicense	Domain Administration	Manage Services	License object and application service
AssignRSToWSHubService	Domain Administration	Manage Services	PowerCenter Repository Service and Web Services Hub
AssignRoleToGroup	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
AssignRoleToUser	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
AssignUserPermission (on application services or license objects)	Domain Administration	Manage Services	Application service or license object
AssignUserPermission (on domain)*	-	-	-
AssignUserPermission (on folders)	Domain Administration	Manage Domain Folders	Folder
AssignUserPermission (on nodes or grids)	Domain Administration	Manage Nodes and Grids	Node or grid
AssignUserPermission (on operating system profiles)*	-	-	-
AssignUserPrivilege	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
AssignedToLicense	Domain Administration	Manage Services	License object and application service
ConvertLogFile	-	-	Domain or application service
CreateConnection*	-	-	-
CreateFolder	Domain Administration	Manage Domain Folders	Domain or parent folder
CreateGrid	Domain Administration	Manage Nodes and Grids	Domain or parent folder and nodes assigned to grid
CreateGroup	Security Administration	Manage Users, Groups, and Roles	-
CreateIntegrationService	Domain Administration	Manage Services	Domain or parent folder, node or grid where PowerCenter Integration Service runs, license object, and associated PowerCenter Repository Service
CreateMMService	Domain Administration	Manage Services	Domain or parent folder, node where Metadata Manager Service runs, license object, and associated PowerCenter Integration Service and PowerCenter Repository Service
CreateOSProfile*	-	-	-
CreateRepositoryService	Domain Administration	Manage Services	Domain or parent folder, node where PowerCenter Repository Service runs, and license object
CreateRole	Security Administration	Manage Users, Groups, and Roles	-
CreateSAPBWService	Domain Administration	Manage Services	Domain or parent folder, node or grid where SAP BW Service runs, license object, and associated PowerCenter Integration Service
CreateUser	Security Administration	Manage Users, Groups, and Roles	-
CreateWSHubService	Domain Administration	Manage Services	Domain or parent folder, node or grid where Web Services Hub runs, license object, and associated PowerCenter Repository Service
DisableNodeResource	Domain Administration	Manage Nodes and Grids	Node
DisableService (for Metadata Manager Service)	Domain Administration	Manage Service Execution	Metadata Manager Service and associated PowerCenter Integration Service and PowerCenter Repository Service
DisableService (for all other application services)	Domain Administration	Manage Service Execution	Application service
DisableServiceProcess	Domain Administration	Manage Service Execution	Application service
DisableUser	Security Administration	Manage Users, Groups, and Roles	-
EditUser	Security Administration	Manage Users, Groups, and Roles	-
EnableNodeResource	Domain Administration	Manage Nodes and Grids	Node
EnableService (for Metadata Manager Service)	Domain Administration	Manage Service Execution	Metadata Manager Service, and associated PowerCenter Integration Service and PowerCenter Repository Service
EnableService (for all other application services)	Domain Administration	Manage Service Execution	Application service
EnableServiceProcess	Domain Administration	Manage Service Execution	Application service
EnableUser	Security Administration	Manage Users, Groups, and Roles	-
ExportDomainObjects (for connections)	Domain Administration	Manage Connections	Read on connections
ExportDomainObjects (for users, groups, and roles)	Security Administration	Manage Users, Groups, and Roles	-
ExportUsersAndGroups	Security Administration	Manage Users, Groups, and Roles	-
GetFolderInfo	-	-	Folder
GetLastError	-	-	Application service
GetLog	-	-	Domain or application service
GetNodeName	-	-	Node
GetServiceOption	-	-	Application service
GetServiceProcessOption	-	-	Application service
GetServiceProcessStatus	-	-	Application service
GetServiceStatus	-	-	Application service
GetSessionLog	Run-time Objects	Monitor	Read on repository folder
GetWorkflowLog	Run-time Objects	Monitor	Read on repository folder
Help	-	-	-
ImportDomainObjects (for connections)	Domain Administration	Manage Connections	Write on connections
ImportDomainObjects (for users, groups, and roles)	Security Administration	Manage Users, Groups, and Roles	-
ImportUsersAndGroups	Security Administration	Manage Users, Groups, and Roles	-
ListAlertUsers	-	-	Domain
ListAllGroups	-	-	-
ListAllRoles	-	-	-
ListAllUsers	-	-	-
ListConnectionOptions	-	-	Read on connection
ListConnectionPermissions	-	-	-
ListConnectionPermissions by Group	-	-	-
ListConnectionPermissions by User	-	-	-
ListConnections	-	-	-
ListDomainLinks	-	-	Domain
ListDomainOptions	-	-	Domain
ListFolders	-	-	Folders
ListGridNodes	-	-	-
ListGroupPermissions	-	-	-
ListGroupPrivilege	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
ListGroupsForUser	-	-	Domain
ListLDAPConnectivity	Security Administration	Manage Users, Groups, and Roles	-
ListLicenses	-	-	License objects
ListNodeOptions	-	-	Node
ListNodeResources	-	-	Node
ListNodes	-	-	-
ListPlugins	-	-	-
ListRepositoryLDAPConfiguration	-	-	Domain
ListRolePrivileges	-	-	-
ListSMTPOptions	-	-	Domain
ListSecurityDomains	Security Administration	Manage Users, Groups, and Roles	-
ListServiceLevels	-	-	Domain
ListServiceNodes	-	-	Application service
ListServicePrivileges	-	-	-
ListServices	-	-	-
ListUserPermissions	-	-	-
ListUserPrivilege	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
MoveFolder	Domain Administration	Manage Domain Folders	Original and destination folders
MoveObject (for application services or license objects)	Domain Administration	Manage Services	Original and destination folders
MoveObject (for nodes or grids)	Domain Administration	Manage Nodes and Grids	Original and destination folders
Ping	-	-	-
PurgeLog*	-	-	-
RemoveAlertUser (for other users)	Security Administration	Manage Users, Groups, and Roles	-
RemoveAlertUser (for your user account)	-	-	-
RemoveConnection	-	-	Write on connection
RemoveConnectionPermissions	-	-	Grant on connection
RemoveDomainLink*	-	-	-
RemoveFolder	Domain Administration	Manage Domain Folders	Domain or parent folder and folder being removed
RemoveGrid	Domain Administration	Manage Nodes and Grids	Domain or parent folder and grid
RemoveGroup	Security Administration	Manage Users, Groups, and Roles	-
RemoveGroupPrivilege	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
RemoveLicense	Domain Administration	Manage Services	Domain or parent folder and license object
RemoveNode	Domain Administration	Manage Nodes and Grids	Domain or parent folder and node
RemoveNodeResource	Domain Administration	Manage Nodes and Grids	Node
RemoveOSProfile*	-	-	-
RemoveRole	Security Administration	Manage Users, Groups, and Roles	-
RemoveRolePrivilege	Security Administration	Manage Users, Groups, and Roles	-
RemoveService	Domain Administration	Manage Services	Domain or parent folder and application service
RemoveServiceLevel*	-	-	-
RemoveUser	Security Administration	Manage Users, Groups, and Roles	-
RemoveUserFromGroup	Security Administration	Manage Users, Groups, and Roles	-
RemoveUserPrivilege	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
RenameConnection	-	-	Write on connection
ResetPassword (for other users)	Security Administration	Manage Users, Groups, and Roles	-
ResetPassword (for your user account)	-	-	-
RunCPUProfile	Domain Administration	Manage Nodes and Grids	Node
SetConnectionPermission	-	-	Grant on connection
SetLDAPConnectivity	Security Administration	Manage Users, Groups, and Roles	-
SetRepositoryLDAPConfiguration	-	-	Domain
ShowLicense	-	-	License object
ShutdownNode	Domain Administration	Manage Nodes and Grids	Node
SwitchToGatewayNode*	-	-	-
SwitchToWorkerNode*	-	-	-
UnAssignISMMService	Domain Administration	Manage Services	PowerCenter Integration Service and Metadata Manager Service
UnAssignRoleFromGroup	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
UnAssignRoleFromUser	Security Administration	Grant Privileges and Roles	Domain, Metadata Manager Service, Model Repository Service, or PowerCenter Repository Service.
UnassignLicense	Domain Administration	Manage Services	License object and application service
UnassignRSWSHubService	Domain Administration	Manage Services	PowerCenter Repository Service and Web Services Hub
UnassociateDomainNode	Domain Administration	Manage Nodes and Grids	Node
UpdateConnection	-	-	Write on connection
UpdateDomainOptions*	-	-	-
UpdateFolder	Domain Administration	Manage Domain Folders	Folder
UpdateGatewayInfo*	-	-	-
UpdateGrid	Domain Administration	Manage Nodes and Grids	Grid and nodes
UpdateIntegrationService	Domain Administration	Manage Services	PowerCenter Integration Service
UpdateLicense	Domain Administration	Manage Services	License object
UpdateMMService	Domain Administration	Manage Services	Metadata Manager Service
UpdateNodeOptions	Domain Administration	Manage Nodes and Grids	Node
UpdateNodeRole	Domain Administration	Manage Nodes and Grids	Node
UpdateOSProfile	Security Administration	Manage Users, Groups, and Roles	Operating system profile
UpdateRepositoryService	Domain Administration	Manage Services	PowerCenter Repository Service
UpdateSAPBWService	Domain Administration	Manage Services	SAP BW Service
UpdateSMTPOptions*	-	-	-
UpdateServiceLevel*	-	-	-
UpdateServiceProcess	Domain Administration	Manage Services	PowerCenter Integration Service Each node added to the PowerCenter Integration Service
UpdateWSHubService	Domain Administration	Manage Services	Web Services Hub
generateHadoopConnectionFromHiveConection	-	-	-
listMonitoringOptions	Monitoring	Monitoring Configuration	Domain
purgeMonitoringData	Monitoring	Monitoring Configuration	Domain
updateMonitoringOptions	Monitoring	Monitoring Configuration	Domain
*To run these commands, users must be assigned the Administrator role for the domain.

Rename Saved Search

Table of Contents

Security Guide

Security Guide

infacmd isp Commands

infacmd isp Commands