Permissions determine the access rights that a user has for a project, folder, or asset. Permissions add additional or custom security for an object. Permissions define which users and groups can read, update, delete, execute, and change permissions on the object.
Before you set up a business application, don't add any permission to the predefined projects on the Explore page.
When you configure permissions on an object, verify that the user or group to which you grant permissions is assigned a role with the appropriate privileges for the object type.
To configure permissions on an object, you need the following licenses and privileges:
•To configure permissions at the project level for all assets in a project, your organization must have the Set/Unset Security Permissions at the Project Level license.
•To configure permissions at the folder level for all assets in a folder, your organization must have the Set/Unset Security Permissions at the Folder Level license.
To configure permissions on an object, navigate to the object and set the appropriate permissions. For example, you want only users in the Development Team user group to have access to assets in the Development Data folder. Navigate to the folder, edit the permissions, and grant the Development Team user group permissions on the folder.
Permissions apply to the objects for which you configure them but not to copies of the object. Therefore, when you copy or export an asset, the permissions are not copied or exported with the asset. For example, you export a report in which only user roles has the execute permission. When you import the report, the imported report has no permissions assigned to it. Therefore, any user with privileges to run reports can run the imported report.
You can configure the following permissions on an object:
Permission
Description
Read
Open and view the object.
If you select a task, this permission also allows the user or group to use a connection or schedule in the task.
Update
Edit the object.
Requires read permission, which is automatically granted.
Delete
Delete the object.
Execute
Run the object.
Applies to mappings, tasks, taskflows, reports, and jobs. Monitor, stop, and restart instances of the mapping, task, or taskflow.
Change permissions
Change the permissions that are assigned to the object.
Note: These permissions control permissions within Informatica Intelligent Cloud Services. They don't control operating system permissions, such as the ability to start, stop, or configure the Secure Agent on Windows or Linux.
Configuring permissions
You can configure permissions on an object if you are assigned a role with the Set Permission privilege for the object type. For example, to configure permissions on a folder, you must be assigned a role that has the Set Permission privilege for folders.
1Navigate to the object for which you want to configure permissions.
2In the row that contains the object, either click Actions and select Permissions, or click the Change Permission icon.
The Permissions dialog box lists the users and groups that have permissions on the object.
If the Permissions dialog box lists no users or groups, then no permissions are configured for the object. Any user with appropriate privileges for the object type can access the object.
3To configure user permissions on the object:
aSelect Users.
bIf the user does not appear in the Users list, click Add, and select a user.
cEnable or disable the appropriate permissions on the user.
Note: When you grant any user permissions on the object, Informatica Intelligent Cloud Services also adds you as a user with permissions on the object. This prevents you from losing access to the object when you configure permissions.
4To configure user group permissions on the object:
aSelect Groups.
bIf the group does not appear in the Groups list, click Add, and select a group.
cEnable or disable the appropriate permissions on the group.
Note: When you grant any group permissions on the object, Informatica Intelligent Cloud Services also adds you as a user with permissions on the object. This prevents you from losing access to the object when you configure permissions.
5To remove all permissions for the object, remove all users and groups from the Permissions dialog box.
When you remove all users and groups, any user with appropriate privileges for the object type can access the object.