Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Click Add a new Role.

   The Add a new role dialog box displays.

3. In the ROLE NAME field, enter a name for the role.

   Note that the role name must start with a letter, and must contain only letters, digits, hyphens, or underscores. Spaces in names are not allowed. Make sure that the name strings do not match any Data Catalog Reserved Names.

4. In the METADATA ACCESS field, select the resource metadata read access for this role.

   • With the NATIVE setting, the system user permissions dictate the metadata read access for an individual resource. With METADATA ACCESS set to NATIVE, the DATA ACCESS field is automatically set to NATIVE.
   • With the YES setting, Data Catalog overrides the native system permissions to make just the resource metadata visible to all users with this role, even if they do not have native access to the resource.
   

5. Specify the DATA ACCESS.

   With DATA ACCESS set to NO, the METADATA ONLY mode for resource read access is enabled where Data Catalog skips permission checks for data access and only displays the resource metadata.

6. In the DESCRIPTION field, enter information to describe the purpose of the role.

7. Click Create.

Results

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Select the role you want to set as default.

3. Click MAKE DEFAULT ROLE to set the role as a default role.

   

4. Click Save.

Results

Parent Topic

• Managing roles

You can assign multiple roles to one user. The role with most unrestricted access dictates the access permissions.

For example, user sam_admin has been assigned the role of Admin and the custom roles of Data_Steward and Business_Analyst. The user sam_admin will get the Admin permissions which have the most unrestricted access.

If you assign a user a MarketingAdmin role with NATIVE read level access and a SalesSteward role with METADATA level access, the most trusted read level access prevails. In this example, the user can view METADATA of all the resources within the virtual folders assigned to the role.

See Assign a role for detailed assignment instructions.

Parent Topic

• Managing roles

Child Topics

• Dynamic group to role mapping

{
  "firstName": "givenName",
  "lastName": "sn",
  "email": "mail",
  "userGroupAttributes": [
    {"attributeName": "memberOf", "subAttributeName": "cn"}
  ],
  "groupToRoleMap": {
    "Finance": ["FinanceBA", "Marketing_Admin"],
    "Marketing": ["Marketing_Analyst"],
    "Automation": ["QA_Steward"]
  }
}

Procedure

1. Navigate to Manage, then click Roles.

2. Click the role you want to duplicate.

3. On the Settings tab, click the More actions icon, and then select Duplicate this role.

   A note displays indicating role duplication.

Results

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Click the role you want to delete.

3. On the Settings tab, click the More actions icon, and then select Delete.

   A confirmation dialog box displays.

   

4. Click Confirm.

   If no dependencies are found, the role is deleted. If the role being deleted is the only role assigned to a user, the role is not deleted.

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Select the role you want to edit.

   

3. On the Settings tab, update the fields and controls.

4. You can update role access level definitions by making changes in the permission group assignments.

   NoteAssigning permissions from a group that is a higher level than the user's current permission group can impact product pricing. For information about how to purchase additional permission groups, contact your sales representative.

5. Click Save.

Results

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Select the role to which you want to assign a virtual folder.

3. Click the Virtual Folders tab, then click Choose a Virtual Folder.

   

4. Select the virtual folders the role can access.

   You can choose All to allow this role to access all tag domains.

Results

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Select the role you want to edit.

3. Click the Virtual Folders tab.

4. On the row of the virtual folder to remove, click the More actions icon and select Remove from role.

   

Results

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Select the role to which you want to assign a tag domain.

3. Click the Tag Domains tab, then click Choose a Tag Domain.

   

4. Select the tag domains the role should access.

   You can choose All to allow this role to access all tag domains.

Results

Parent Topic

• Managing roles

Procedure

1. Navigate to Manage, then click Roles.

2. Select the role from which you want to remove a tag domain.

3. Click the Tag Domains tab.

4. On the row of the tag domain to remove, click the More actions icon and select Remove from role.

   

Results

Parent Topic

• Managing roles