Security Guide

Back Next

Domain Object Permissions

You configure privileges and permissions to manage user security within the domain. Permissions define the level of access a user has to a domain object. To log in to the Administrator tool, a user must have permission on at least one domain object. If a user has permission on an object, but does not have the domain privilege that grants the ability to modify the object type, then the user can only view the object.

For example, if a user has permission on a node, but does not have the Manage Nodes and Grids privilege, the user can view the node properties, but cannot configure, shut down, or remove the node.

You can configure permissions on the following types of domain objects:

Domain Object Type	Description of Permission
Domain	Enables Administrator tool users to access all objects in the domain. When users have permission on a domain, they inherit permission on all objects in the domain.
Folder	Enables Administrator tool users to access all objects in the folder in the Administrator tool. When users have permission on a folder, they inherit permission on all objects in the folder.
Node	Enables Administrator tool users to view and edit the node properties. Without permission, a user cannot use the node when defining an application service or creating a grid.
Grid	Enables Administrator tool users to view and edit the grid properties. Without permission, a user cannot assign the grid to a Data Integration Service or CDI-PC Integration Service .
License	Enables Administrator tool users to view and edit the license properties. Without permission, a user cannot use the license when creating an application service.
Application Service	Enables Administrator tool users to view and edit the application service properties.
Operating System Profile	Enables Informatica developers, analysts, and operators associated with the operating system profile to run mappings, profiles, and workflows. Enables CDI-PC users to run workflows associated with the operating system profile. If the user that runs a workflow does not have permission on the operating system profile assigned to the workflow, the workflow fails.

You can use the following methods to manage domain object permissions:

Manage permissions by domain object. Use the Permissions view of a domain object to assign and edit permissions on the object for multiple users or groups.

Manage permissions by user or group. Use the Manage Permissions dialog box to assign and edit permissions on domain objects for a specific user or group.

You configure permissions on an operating system profile differently than you configure permissions on other domain objects.

Permissions

Permissions by Domain Object

Permissions by User or Group

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal