Security Profiles

Overview

Security Profiles allow users to extend the global, role-based security settings on individual assets such as Catalog subject areas and rules, and Migrate datasets, releases, and datasources. This allows for very fine-grained security control for certain assets when needed. When a security profile is applied to an asset, only users associated with user groups and roles specifically assigned to the security profile have visibility or access to that asset and its underlying components.

For example, most of the data in a Catalog should be accessible based on your global permissions. Making catalog data widely available to users is what makes a catalog valuable in the first place. However, assets such as rules related to Employees can be sensitive. Security Profiles allow you to hide those sensitive rules from most users, but grant access to the specific HR Managers, Data Stewards, and Developers responsible for managing those rules in the catalog.  

Security profile managers can make changes to that security profile as required to allow additional users access to the assets to which a security profile is applied.

Users with the Administrator user role have access to the Security Profiles menu and all available Security Profiles. Users with any other user roles (except Viewer) only have access to the Security Profiles menu if they are assigned as a Manager on the Security Profile. Viewer users do not have access to Security Profiles.

This article contains the following sections:

• Create a Security Profile

• Edit a Security Profile

• Security Profile Roles and Groups

• Security Profile Managers

Create a Security Profile

On the Create Security Profile page, only the Name and Description are entered. Roles, groups, and managers are added to the security profile on the security profile’s Details page. The creator of the security profile is automatically assigned as the security profile manager. Additional managers can be added to the security profile after the security profile is created.

To create a new security profile:

1. Verify you’re in the Admin module of the Syniti Knowledge Platform.
   Or
   Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.

2. Click Security Profiles in the Admin menu.

3. Click the Create security profile button.

Assign Roles and Groups to Security Profiles

Roles and user groups are assigned to security profiles to further specify user access to the assets to which the security profile is applied. If a security profile is applied to an asset, the roles and user groups must be applied to the security profile for users to have access to that asset.

Note

Syniti recommends you first create a User Group with the required users who will be part of your security profile.

Roles

When the View is toggled to Roles on the Roles and Groups tab of the security profile Details page, an existing role can be added to the security profile. Adding a role applies those role details to the security profile, allowing users with that role to have the specified access to the asset(s) to which the security profile is applied.

To add a role to a security profile:

1. Verify the View is toggled to Roles on the Roles and Groups tab of the security profile’s Details page.

2. Click the Add role button.

3. Select the desired role from the Role list box.

4. Select the appropriate user group(s) from the Groups list box.

   Note

   More than one user group can be added to a security profile. Click the X icon on the user group on this page to remove it from the security profile before saving.

5. Click the Save button.

Once a role is added to a security profile, it can be edited or deleted from the security profile using the Delete icon on the Roles and Groups tab.

Groups

When the View is toggled to Groups on the Roles and Groups tab of the security profile Details page, an existing user group can be added to the security profile. Adding a user group allows users with that user group to have the specified access to the asset(s) to which the security profile is applied.

To add a user group to a security profile:

1. Verify the View is toggled to Groups on the Roles and Groups tab of the security profile’s Details page.

2. Click the Add group button.

3. Select the desired user group from the Group list box.

4. Select the appropriate roles(s) from the Roles list box.

   Note

   More than one role can be added to a security profile. Click the Remove (X) icon on the role on this page to remove it from the security profile before saving.

5. Click the Save button.

Once a user group is added to a security profile, it can be edited or deleted from the security profile using the Delete icon on the Roles and Groups tab.

Security Profiles Managers

Users who are set as managers on a security profile have access to select that security profile to apply to an asset. If you are not set as a manager on a security profile, that security profile is not available for the user to select on the unassigned asset. However, if you are set as a user in Security Profile A and a manager in Security Profile B, you can view an asset already assigned to Security Profile A and update this asset with Security Profile B or other profiles you manage.

Managers can be added or removed by any/all other manager(s) on the security profile or any Admin user. When a security profile is created, the user who created the security profile is automatically added as a manager.

Note

Administrator users have access to all available Security Profiles. Users with other user roles only have access to those Security Profiles to which they have been assigned as a Manager. Viewer users do not have access to Security Profiles.

To add additional managers to a security profile:

1. Verify you are on the Managers tab of the security profile’s Details page.

2. Click the Add managers button.

3. Select the desired manager(s) from the Managers list box.

4. Click the Save button.

Once saved, managers can be removed from the security profile by clicking the Remove manager icon.

Note

It is possible to remove your user as a manager from a security profile. If this happens, another user who is assigned the manager role on the security profile must add you back as a manager for you to have access to use or maintain the security profile.

Edit a Security Profile

When editing a security profile, only the Name and Description can be changed. Roles, groups, and managers can be changed separately on the security profile’s Details page.

To edit a security profile:

1. Verify you’re in the Admin module of the Syniti Knowledge Platform.
   Or
   Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.

2. Click Security Profiles in the Admin menu.

3. Click the Edit security profile icon.