Managing Resource Security Overview
You can configure specific permissions on resources for users and user groups configured in Informatica domain.
As a catalog administrator, you can specify access permissions on resources for specific users and user groups. The type of access permissions depends on the specific security and privilege requirements in your enterprise. For example, in a financial institution, apart from the data steward who validates the integrity, consistency, and quality of the data, no one in the institution must be able to view the details of the data sources that store confidential customer details. Identification of data sources that store customer details by unauthorized personnel might lead to hacking of the data sources and leaking of confidential information.
You can specify permissions using the Catalog Administrator in the following ways:
- •Specify default permissions on all resources or specific resources for users and user groups.
- •Select a specific resource and specify the permissions for the users and user groups.
- •Select specific users or user groups and configure permissions on the resources.
As a catalog administrator, you can assign users and user groups the following permissions on resources:
- Read
- View the details of the resource and assets in Enterprise Data Catalog.
- Read and Write
- Allows the user or users included in the user group to enrich the assets in the Enterprise Data Catalog in addition to the read permission. You can enrich assets by assigning custom attributes, business terms, or data domains to the asset. Enriching assets helps you search for the asset using the assigned custom attribute, business term, or data domain.
Note: When you configure data permissions for relational sources such as Oracle, the users or users included in the user groups have permissions to all the assets including assets such as tables, views, and synonyms.
However, when you configure data permissions for the following assets, the users or users included in the user groups have permissions to access only the following assets:
- - Tables
- - Views
- - Synonyms
- Metadata and Data Read
- Allows the user or users included in the user group to view the value frequency for an asset in Enterprise Data Catalog. You can assign this permission to resources that support profiling. For the list of resources that support profiling, see Data Discovery.
- All Permissions
- Allows the user or users included in the user group to enrich the assets in the Enterprise Data Catalog and view the value frequency for the asset. You can enrich assets by assigning custom attributes, business terms, or data domains to the asset. Enriching assets helps you search for the asset using the assigned custom attribute, business term, or data domain.