From Talend Studio, the
administrator can create as many custom roles as needed and grant specific rights and
privileges on different data objects and pertaining items.
The administrator can also rename, copy, duplicate an existing custom role and edit its
properties (e.g. function, purpose, version, etc.), classify a custom role into a
specific category, and export/import selected custom roles.
Note: The MDM server is delivered with the following default system roles:
System_Admin, System_Interactive, and
System_Web. The default system roles are not displayed under
the Role node in the MDM Repository and
cannot be modified.
Once the custom role is created, an authorized business person can assign this role to
any user through Talend MDM Web UI. For more
information, see user management in Talend MDM Web UI User Guide.
Note: You must always define access control
to business entities and attributes in the data model for the role you create. This will
set what type of access to business entities and attributes is attached to this
role.
Before you begin
- You have already connected to the MDM server from Talend Studio.
- You have the appropriate user authorization to create a custom role.
About this task
To create a custom role, do the following:
Procedure
-
In the MDM Repository tree view, expand the
Role node. All custom role categories and custom
roles are displayed under it.
Warning: The name of a category must not be
system or any of its upper or lower case
variants. Any breach of this rule will result in failure in importing the
category.
-
Right-click the Role node or a category node if you want
to classify the new custom role in that category, and select
New from the contextual menu. The New
Role dialog box displays.
You can also classify a custom role into a category by dragging it into that
category after creation.
-
Enter a name for the new custom role and then click Next
to open the Role Type view on the dialog box.
Warning:
- The name of a custom role is case sensitive.
- The name of a custom role must not start with
"system_" and must not be
"administration", no matter uppercase or
lowercase. Any breach of this rule will result in failure in
importing the custom role.
-
Select one of the two available options according to the role type you want to
create and click Finish.
-
Double-click the newly created role, which appears under the
Role node in the MDM
Repository tree view.
An editor opens in the workspace.
-
Click the three-dot button next to Description to open a
dialog box where you can add multilingual labels to the new role.
-
From the list to the left, select a language and enter the corresponding role
description in the field to the right.
Click the

button
to add the description to the
Language/Label
list.
Repeat the operation to add as many descriptions as needed and click
OK to close the dialog box.
All defined
role descriptions display in the Description
field.
-
From the Object Type list, select the data object type
to which you want to give a role permission.
From this list you can give access permission to any of the
data objects you can find in the
MDM
Repository tree view such as
View,
Menu,
Data Container,
Data
Model, etc.
-
In the Read and Write Permissions on Specific Instances
field, select the data object itself to which you want to give access.
Note: The use of regular expressions is supported. For example, if you want to
grant the new role an access to all views, enter
"Browse_items-.*
" in the field.
-
In the field to the right, select the permission type you want to give to the
new role. Read Only is the by-default type.
-
Click the
button
to add the item to the table in the lower half of the editor.
-
Click the save icon on the toolbar or press Ctrl + S on
your keyboard to save your changes.
The newly created custom role is listed under the Role
node in the MDM Repository tree view.