Security Guide

Back Next

Permissions Overview

You manage user security with privileges and permissions. Permissions define the level of access that users and groups have to an object.

Even if a user has the privilege to perform certain actions, the user may also require permission to perform the action on a particular object.

For example, a user has the Manage Services domain privilege and permission on the Development

CDI-PC Repository Service

, but not on the Production

CDI-PC Repository Service

. The user can edit or remove the Development

CDI-PC Repository Service

, but not the Production

CDI-PC Repository Service

. To manage an application service, a user must have the Manage Services domain privilege and permission on the application service.

You use different tools to configure permissions on the following objects:

Object Type	Tool	Description
Applications and application objects	Administrator tool	You can assign permissions on applications and application objects such as mappings and workflows.
Connection objects	Administrator tool Analyst tool Developer tool	You can assign permissions on connections defined in the Administrator tool, Analyst tool, or Developer tool. These tools share the connection permissions.
Domain objects	Administrator tool	You can assign permissions on the following domain objects: domain, folders, nodes, grids, licenses, application services, and operating system profiles.
Model repository projects	Analyst tool Developer tool	You can assign permissions on projects defined in the Analyst tool and Developer tool. These tools share project permissions.
CDI-PC repository objects	CDI-PC Client	You can assign permissions on CDI-PC folders, deployment groups, labels, queries, and connection objects.