Privileges determine the access a user has at the object level. You can configure privileges for object types at the user group-level or configure privileges for specific objects in object-level privileges. Privileges add additional or custom security for an object. Privileges define which users and groups can read, update, delete, execute, and change privilege on the object.
Administrators assign privileges for the organization in Administrator. For more information, see the Administrator help.
Required privileges for Cloud Integration Hub users
To perform actions in Cloud Integration Hub, Cloud Integration Hub users need the following privileges:
Administrator service
Read privileges for Organization, Secure Agent, Secure Agent Group, and User assets.
Data Integration service
Read privileges for Connection, Mapping Task, and Synchronization Task assets.
Integration Hub service
▪ Integration Hub feature is enabled.
▪ Read privileges for Hub Application, Hub Monitoring Rule, Hub Publication, Hub Subscription, and Hub Topic.
▪ Create, update, and delete privileges for Hub Application, Hub Monitoring Rule, and Hub Topic, based on the tasks that users need to perform on each asset type.
▪ Create, update, delete, and run privileges for Hub Publication and Hub Subscription, based on the tasks that users need to perform on each asset type.
You can assign privileges for Cloud Integration Hub assets by assigning user roles to users and user groups. You can either use the Informatica Intelligent Cloud Services system-defined roles Designer, Admin, or Monitor, or define custom roles. For more information about user roles in Cloud Integration Hub, see User roles.
Required privileges for Data Integration users
To perform actions in Informatica Intelligent Cloud Services for Cloud Integration Hub operations, for example, to develop mappings and to create tasks, Informatica Intelligent Cloud Services users need the following privileges:
Administrator service
Read privileges for Secure Agent, Connections, and Runtime Environment assets.
You must have the read privilege to access the integration hub connection to perform any operations.
Data Integration service
▪ Read, create, update, and delete privileges for Connection asset.
▪ Read, create, update, delete, and run privileges for mapping task, synchronization task, and Mapping assets.