Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

User roles must be granted with permissions in order to access and do operations on every Governance Registry feature. Following are the combinations of permissions required to access Governance Registry features and do relevant operations. Permissions can be granted to a user role while its being created. 

...

  1. Browse 
    1. All Permission>Admin Permissions>Manage>Resources>Browse

  2. Activity search 
    1. All Permission>Admin Permissions>Manage>Search>Activities

  3. Search 
    1. All Permission>Admin Permissions>Manage>Search>Advanced

  4. Reports 
    1. All Permission>Admin Permissions>Manage>Resources>WS-API
    2. All Permission>Admin Permissions>Manage>Resources>Browse

Main>Metadata

...

In order to Add any artifact the following permissions must be given:

    1. All Permission>Admin
  1. Permissions>Manage>Resources>Govern>Metadata
    1. Permissions>Manage>Resources>Govern>Metadatta
    2. All Permission>Admin
  2. Permissions>Manage>Resources>Govern>Services>AddAll Permission>Admin
    1. Permissions>Manage>Resources>Govern>Generic Artifacts>Add
    2. All Permission>Admin Permissions>Manage>Resources>WS-API
    3. All Permission>Admin Permissions>Manage>Resources>Browse
  3. Add WSDL   
  4. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
  5. All Permission>Admin Permissions>Manage>Resources>Govern>WSDLs>Add 
  6. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>Add
  7. All Permission>Admin Permissions>Manage>Resources>WS-API
  8. All Permission>Admin Permissions>Manage>Resources>Browse 
    Add Schema 
  9. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
  10. All Permission>Admin Permissions>Manage>Resources>Govern>Schemas>Add
  11. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>Add
  12. All Permission>Admin Permissions>Manage>Resources>WS-API
  13. All Permission>Admin Permissions>Manage>Resources>Browse

In addition, the following specific permissions must be given for each artifact:

  1. Add API 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>APIs>Add

  2. Add Policy
    1. All Permission>Admin Permissions>Manage>Resources>Govern>MetadataAll Permission>Admin Permissions>Manage>Resources>Govern>Policies>Add
      All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>Add
  3. Add Schema 
    1. All Permission>Admin Permissions>Manage>Resources>WS-APIAll Permission>Admin Permissions>Manage>Resources>Browse
    Add API 
    1. Permissions>Manage>Resources>Govern>Schemas>Add
  4. Add Service
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
    2. All Permission>Admin Permissions>Manage>Resources>Govern>APIs>Add
    3. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>Add
    4. All Permission>Admin Permissions>Manage>Resources>WS-API
    5. All Permission>Admin Permissions>Manage>Resources>Browse
    Add URI 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>MetadataPermissions>Manage>Resources>Govern>Services>Add

  5. Add URI 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>URIs>Add
    2. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>Add 
    3. All Permission>Admin Permissions>Manage>Resources>WS-API

  6. Add WSDL   

 

    1. All Permission>Admin
  1. Permissions>Manage>Resources>Browse
    1. Permissions>Manage>Resources>Govern>WSDLs>Add 
  2. List Service 

In order to List any artifact, the following permissions must be given

  1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
  2. All Permission>Admin Permissions>Manage>Resources>Govern>Services>ListAll Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>List
  3. All Permission>Admin Permissions>Manage>Resources>WS-APIList WSDL 

In addition, the following specific permissions must be given for each artifact:

  1. List API 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>MetadataAll Permission>Admin Permissions>Manage>Resources>Govern>WSDLs>ListPermissions>Manage>Resources>Govern>APIs>List

  2. List Policy
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>ListAll Permission>Admin Permissions>Manage>Resources>WS-APIPermissions>Manage>Resources>Govern>Policies>List

  3. List Schema 
      All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Schemas>ListAll Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>List
      All Permission>Admin Permissions>Manage>Resources>WS-API
    List Policy 

  4. List Service
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
    2. All Permission>Admin Permissions>Manage>Resources>Govern>Policies>List
    3. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>List
    4. All Permission>Admin Permissions>Manage>Resources>WS-API
    List API 
    1. Permissions>Manage>Resources>Govern>Services>List

  5. List URI 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
    2. All Permission>Admin Permissions>Manage>Resources>Govern>APIs>List 
    3. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>List
    4. All Permission>Admin Permissions>Manage>Resources>WS-API
    List URI 
    1. Permissions>Manage>Resources>Govern>URIs>List

  6. List WSDL   
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
    2. All Permission>Admin Permissions>Manage>Resources>Govern>URIs>List 
    3. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>List
    4. All Permission>Admin Permissions>Manage>Resources>WS-APIPermissions>Manage>Resources>Govern>WSDLs>List

 

Info

You might want to have a look at the default permission mappings in repository/conf/permission-mappings.xml if you are interested in more granular resource access permissions.

...

  1. Life Cycles
    1. All Permission>Admin Permissions>Manage>Resources>Community Features
    2. All Permission>Admin Permissions>Manage>Resources>Govern>Lifecycles
    3. All Permission>Admin Permissions>Manage>Resources>Browse
  2.  In order to perform a life cycle operation (Promoted/Demote) on a resource the user should have READ/WRITE permissions to the target environment. 

...