MDM authorization and security

[Former Member]

Hi ,

we are builded the MDM 7.1 version now we are going to provide the security & authorization .

can you please any one sugguest what are roles and User,Repository,basis Roles and Authorizations(called privileges in MDM).

Thanks

James.Joseph

[Former Member · Accepted solution]

HI James,

Below role may help you

Admin role: having access to every table and every activity (including: console, data manager, import manager, syndicator). Haing right to perform each and every activity including creation/deletion/updation of a repository.

Master Data creator role: having access to main table along with ADD, update and delete option but not to approve.

Master Data Approver role: having access to data for the table used by creator but no authorization for add, change, delete, but just to approve.

Then some other roles: Just for read only access for business users to take decisions by using master data.

roles having authorization only  to export repository master data and no other authorization.

Regards,

Rohini Joshi.

[Former Member]

Hi James,

To enable proper Authorization and Security on the Repositories and Tables, Please follow the below approach:

Check with the Business or the team involved with you, what are the activities which are going to be done on the repository and it data.

Some roles which you can propose and implement:

i. MDM Basis Role: To migrate the Repository Schema for any change done in the Data model or Maps or Remote System from Dev to Test or to UAT or to Prod etc.

ii. Data Migration Role: People who will be doing the Mass Loads to the system and repository

iii. MDM Developer Role: This role could be given only at the development system which will help restrict the people to make any change in the System

iv. Data Steward Role: this role could be meant for the Business users or the Data Approvers

v. Data Export: Some users want to extract the data for reporting purpose so this can be useful where no one will be able to edit or modify anything except downloading the data

vi. Read Only Role: This role can be given to the users who can view the data but not modify anything

Please let me know if this helps you or if you need any more information to apply the security.

Best Regards,

Gaurav Kumar Sharma

[former_member190061]

Hello James,

As admin default will have all the read and write access.

This is not as simple as that..

First discuss with your team that what are the roles you should have in your space, like Catalog User, Catalog Approvers as ex..

Later once you decide the roles create the same in COnsole with proper authorizations under Table/Fields and Function tabs.(Read Only or Read/write)

Leter on create the users of your organization and asign the predefined roles to them.

Regards,

Girish