MDM custom roles and access control

In order to establish clear user roles and responsibilities, Talend Studio offers a very fine-grained security feature based on custom roles.

The custom roles are defined centrally in Talend Studio.

For each custom role, it is possible to define:

• role permission (Read and Write or Read only),

• which data objects or items pertained in data objects are accessible.

The main data objects for which you can set access control are:

• Data containers: grant permission to store data in different containers,

• Data models: grant permission to define or modify data entities,

• Items: grant record-based access in read-only or write modes,

• Menus: grant access for business users to menus in Talend MDM Web UI,

• Processes: define the actions a user can trigger,

• Views: offer access, search and filter functions on data via Talend MDM Web UI.

Access restrictions are applied immediately upon successful connection to the MDM Hub.

Upon defining a custom role, you need to deploy it to the MDM server so that it is available to authorized users on the User Manager page in Talend MDM Web UI.