Users, Roles & Community

Managing access ..

Administrator - [e-mail] login

Accessing Your Catalog

To access your catalog, please follow these steps:

1. Open Google Chrome web browser.

2. Navigate to: https://pdc.pentaho.example/

3. Enter the following email and password, then click Sign In.

Username	Password	Role
[e-mail]	Welcome123!	Community & User Administrator
[e-mail]	Welcome123!	Manage Business Glossary
[e-mail]	Welcome123!	View Business Glossary
[e-mail]	Welcome123!	Add & Delete content
[e-mail]	Welcome123!	Manage Business Rules & Domain Assets
[e-mail]	Welcome123!	Manage most features except Glossary

PDC Login

1. Users

For identity and access management, you can manage users in Pentaho Data Catalog from the Manage Your Environment page.

Users with the Admin role and users who have been assigned Admin permissions in a community are the only users that can create users or manage their permissions.

Data Catalog comes with a set of default user roles to assign role-based access to users. That access can be fine tuned with communities.

At least one role or community must be assigned to a user when the user is created. Multiple roles or communities can be assigned to a user, if the permissions granted are mutually exclusive and are not derived from the same default role.

Perform the following steps to add a 'system_admin' user:

1. From the Users & Communities card, click: Add New and select Add User.

Inbuilt user accounts

1. Enter the following information for the user.

User Information
Username	[e-mail]
Email	[e-mail]
First name	System
Last name	Admin

User Information

1. Click Add Roles.

2. Select the following checkboxes for the role or roles to assign to the user.

Select all the Roles

1. When you are finished assigning permissions, click Done.

2. Verify the user credentials - follow the steps outlined the tab: Keycloak.

2. Roles

Data Catalog provides default user roles with role-based permissions that enable administrators to control access as necessary across Data Catalog. Administrators can also fine-tune access by creating communities of users to which they assign specific permissions, such as access to particular data source types or business glossaries.

User Roles

The following table shows the access permitted by default for a user with the Business User or Data User role. For example, a user with the Business User role can view business glossaries but cannot view data sources.

The Data User role has all the access of a Business User, and access to data associated with the user's line of business. The data may be masked when deemed sensitive or confidential.

Role	Permission Type	Actions
Business User	Business Glossary	View
Data User	Business Glossary	View
	Data Sources	View, AddContent, DeleteContent, ViewDashboard

Business User

Data User

Steward Roles

The following table shows the access permitted by default for a user with the Business Steward or Data Steward role. The Business Steward role has the same access as the Business User and Data User roles, with the additional permission to create and edit glossaries.

The Business Steward role does not have as much access as the Data Steward role. For example, a user with the Business Steward role can view, but cannot create or update data sources.

Role	Permission Type	Actions
Business Steward	Business Glossary	View, Create, Update, Delete, Import, Export
	Data Sources	View
Data Steward	Business Glossary	View
	Data Sources	View, Create, ViewSamples, Update, RunJobs, ApplyRules, TermAssignment, Delete, Import, Export,AddContent, DeleteContent, ViewDashboard
	Business Rules	View, Create, Update, Delete, Import, Export
	Data Identification Methods	View, Create, Update, Delete, Import, Export
	Reference Data	Create, Delete, Export, Import, Update, UpdateValues, View, ViewValues
	Domain Asset	View, ApplyRules, ApproveRecords

Business Steward

Data Steward

Admin & Developer Roles

The following table shows the access permitted by default for a user with the Admin or Data Developer role. For example, a user with the Admin role can view data sources, but cannot view or create business rules.

Role	Permission Type	Actions
Admin	Business Glossary	View
	Data Sources	View
	Administration	View, Modify
	Domain Asset	View, Modify, ApplyRules, RunEngine, ApproveRecords, Export
Data Developer	Business Glossary	View
	Data Sources	View
	Business Rules	View, Create, Update, Delete, Import, Export
	Domain Asset	View, Modify, ApplyRules, RunEngine, ApproveRecords, Export

Admin

Data Developer

3. Community

A community is a custom role that is used to fine-tune access to specific actions or Data Catalog assets. For example, you can use a community to restrict access for a group of users to a subset of glossaries and data sources.

At least one role or community must be assigned to a user when the user is created. Multiple roles or communities can be assigned to a user, if the permissions granted are mutually exclusive and are not derived from the same default role.

Let's create a community: Synthea_Data_Governance_Council

• Data Steward Role restricted to postgesql:synthea datasource

Restrict scope to postgresql:synthea datasource

1. From the Users & Communities card on the Manage Your Environment page, click Add New and select Add Community.

2. Enter Community name: Synthea_Data_Governance_Council.

3. Select Role: Data Steward

4. (Optional) Enter a description of the community.

5. In the Permissions area, select the checkboxes of permissions per feature that you want the users in the community to have. Checkboxes that are grayed out cannot be selected.

6. Finally in the Scope, expand Data Sources & select: posrgresql:synthea

The following test_user has been assigned a data_steward role.

1. In the Users area, select: test_user & add to the community.

x

x

x

x

Keycloak

The user email address @hv.com obviously cannot be verified, so you'll need to confirm in Keycloak.

1. Login into Keycloak admin: https://pdc.pentaho.example/keycloak/admin

Username	admin
Password	admin

1. Select: 'pdc' realm & Users -> Credentials

pdc realm

1. Reset the password: Welcome123!

2. Login as: [e-mail]

x

x