From Talend Studio, the administrator can create as many custom roles as needed and grant specific rights and privileges on different data objects and pertaining items.
The administrator can also rename, copy, duplicate an existing custom role and edit its properties (e.g. function, purpose, version, etc.), classify a custom role into a specific category, and export/import selected custom roles.
Once the custom role is created, an authorized business person can assign this role to any user through Talend MDM Web UI. For more information, see user management in Talend MDM Web UI User Guide.
Before you begin
- You have already connected to the MDM server from Talend Studio.
- You have the appropriate user authorization to create a custom role.
About this task
In the MDM Repository tree view, expand the
Role node. All custom role categories and custom
roles are displayed under it.
Warning: The name of a category must not be system or any of its upper or lower case variants. Any breach of this rule will result in failure in importing the category.
Right-click the Role node or a category node if you want
to classify the new custom role in that category, and select
New from the contextual menu. The New
Role dialog box displays.
You can also classify a custom role into a category by dragging it into that category after creation.
Enter a name for the new custom role and then click Next
to open the Role Type view on the dialog box.
- The name of a custom role is case sensitive.
- The name of a custom role must not start with "system_" and must not be "administration", no matter uppercase or lowercase. Any breach of this rule will result in failure in importing the custom role.
- Select one of the two available options according to the role type you want to create and click Finish.
Double-click the newly created role, which appears under the
Role node in the MDM
Repository tree view.
An editor opens in the workspace.
Click the three-dot button next to Description to open a
dialog box where you can add multilingual labels to the new role.
From the list to the left, select a language and enter the corresponding role
description in the field to the right.
Click the button to add the description to the Language/Label list.
Repeat the operation to add as many descriptions as needed and click OK to close the dialog box.
All defined role descriptions display in the Description field.
From the Object Type list, select the data object type
to which you want to give a role permission.
From this list you can give access permission to any of the data objects you can find in the MDM Repository tree view such as View, Menu, Data Container, Data Model, etc.Note: When giving access permission to a view, you can also set a filter for the view by using one or multiple conditions, and different filters applied to the same view in different roles can be combined. For more information, see Behaviors of filters using multiple conditions and predicates in Talend MDM.
In the Read and Write Permissions on Specific Instances
field, select the data object itself to which you want to give access.
Note: The use of regular expressions is supported. For example, if you want to grant the new role an access to all views, enter "
Browse_items-.*" in the field.
- In the field to the right, select the permission type you want to give to the new role. Read Only is the by-default type.
- Click the button to add the item to the table in the lower half of the editor.
Click the save icon on the toolbar or press Ctrl + S on
your keyboard to save your changes.
The newly created custom role is listed under the Role node in the MDM Repository tree view.