Understanding User Accounts
An Informatica domain can have the following types of accounts:
- •Default administrator
- •Domain administrator
- •Application client administrator
- •User
Default Administrator
When you install Informatica services, the installer creates the default administrator with a user name and password you provide. You can use the default administrator account to initially log in to the Administrator tool.
The default administrator has administrator permissions and privileges on the domain and all application services.
The default administrator can perform the following tasks:
- •Create, configure, and manage all objects in the domain, including nodes, application services, and administrator and user accounts.
- •Configure and manage all objects and user accounts created by other domain administrators and application client administrators.
- •Log in to any application client.
You cannot disable or modify the user name or privileges of the default administrator. You can change the default administrator password.
Domain Administrator
A domain administrator can create and manage objects in the domain.
The domain administrator can log in to the Administrator tool and create and configure application services in the domain. However, by default, the domain administrator cannot log in to application clients. The default administrator must explicitly give a domain administrator full permissions and privileges to the application services so that they can log in and perform administrative tasks in the application clients.
To create a domain administrator, assign a user the Administrator role for a domain.
Application Client Administrator
An application client administrator can create and manage objects in an application client. You must create administrator accounts for the application clients. To limit administrator privileges and keep application clients secure, create a separate administrator account for each application client.
By default, the application client administrator does not have permissions or privileges on the domain. Without permissions or privileges on the domain, the application client administrator cannot log in to the Administrator tool to manage the application service.
You can set up the following application client administrators:
- Informatica Analyst administrator
Has full permissions and privileges in Informatica Analyst. The Informatica Analyst administrator can log in to Informatica Analyst to create and manage projects and objects in projects and perform all tasks in the application client.
To create an Informatica Analyst administrator, assign a user the Administrator role for an Analyst Service and for the associated Model Repository Service.
- Informatica Developer administrator
Has full permissions and privileges in Informatica Developer. The Informatica Developer administrator can log in to Informatica Developer to create and manage projects and objects in projects and perform all tasks in the application client.
To create an Informatica Developer administrator, assign a user the Administrator role for a Model Repository Service.
- Metadata Manager administrator
Has full permissions and privileges in Metadata Manager. The Metadata Manager administrator can log in to Metadata Manager to create and manage Metadata Manager objects and perform all tasks in the application client.
To create a Metadata Manager administrator, assign a user the Administrator role for a Metadata Manager Service.
- Test Data administrator
Has full permissions and privileges in Test Data Manager. The Test Data Manager administrator can log in to Test Data Manager to create and manage Test Data Manager objects and perform all tasks in the application client.
To create a Test Data administrator, assign a user the Administrator role for a Test Data Manager Service.
- PowerCenter Client administrator
Has full permissions and privileges on all objects in the PowerCenter Client. The PowerCenter Client administrator can log in to the PowerCenter Client to manage the PowerCenter repository objects and perform all tasks in the PowerCenter Client. The PowerCenter Client administrator can also perform all tasks in the pmrep and pmcmd command line programs.
To create a PowerCenter Client administrator, assign a user the Administrator role for a PowerCenter Repository Service.
User
A user with an account in the Informatica domain can perform tasks in the application clients.
Typically, the default administrator or a domain administrator creates and manages user accounts and assigns roles, permissions, and privileges in the Informatica domain. However, any user with the required domain privileges and permissions can create a user account and assign roles, permissions, and privileges.
Users can perform tasks in application clients based on the privileges and permissions assigned to them.