To extract metadata and to configure other capabilities that a catalog source might include, you need account access and permissions on the source system. The permissions required might vary depending on the capability.
Permissions for metadata extraction
Ensure that you have the required permissions to enable metadata extraction.
If you connect to MuleSoft Anypoint Platform with User Name and Password authentication, ensure that the administrator adds the specific user account to the MFA-Exempt Accounts list in Access Management. This allows the user name to work without a multi-factor authentication prompt.
To create and manage Connected Apps, you must be an organization administrator in your MuleSoft Anypoint Platform organization. Create the app in Access Management > Connected Apps in MuleSoft Anypoint Platform. If you don't have this role, ask your MuleSoft administrator to create the app.
To connect with Connected App authentication, you need a Connected App in MuleSoft Anypoint Platform that has the following privileges and permissions:
•The app type must be App acts on its own behalf (client credentials).
•When you create the app, select the following scopes:
- Exchange Viewer (Exchange): view and download assets in a business group
The Contributor and Administrator scopes also work, but provide more access than the catalog source job needs.
- Read Applications (Runtime Manager): read deployed Mule applications in an environment
- View APIs Configuration (API Manager): read API instances
- View Policies (API Manager) and View Contracts (API Manager)
Note:
Required only if the catalog source job reads these objects.
•Enable the app in the root organization or the business groups that contain the assets you want to catalog. Scopes apply only within the business groups and environments that you select.