Wiki Admin

User Permissions - DSS 6 | Data Source Solutions Documentation

Export as HTML Export as PDF Export as DOCX
Edit

Documentation: User Permissions - DSS 6 | Data Source Solutions Documentation

User Permissions

The Data Source Solutions DSS permissions system allows you to manage the levels of access that hub users have to the DSS Hub System. The actions that a hub user can perform, the features and data exposed to a user are governed by the type of permission a user is assigned.

Permission Levels

In DSS, user permissions are divided into the following two levels:

  • Repository Level Permissions
  • Hub Level Permissions

Repository Level Permissions

This is the global permission level defining what a user is allowed to do at the system level including all hubs and users in the repository. Following are the user permissions available in this level:

  • SysAdmin: Full access to the system, including all hubs and users. The SysAdmin has permissions for all operations and can manage all resources and users in the DSS Hub System.

  • HubCreation: Create new hub(s) in the DSS Hub System.

  • ReadMetering: Extract Monthly Active Rows (MAR) consumption/metered usage data of the DSS Hub System.

Hub Level Permissions

This permission level defines what a user is allowed to do within a specific hub. Following are the user permissions available in this level:

  • HubOwner: Full control of the current hub, including changing access, properties, and ReadWrite (channels and locations) access. By default, a user creating a hub is granted the HubOwner permissions on that hub.

  • ReadWrite (channels and locations): Change the definition of channels and locations, perform activation of replication, Refresh, Compare, start/stop jobs, and view objects in the current hub.

  • ReadWrite (channels only) Since v6.1.5/2: Change the definition of channels, perform activation of replication, Refresh, Compare, start/stop jobs and view objects in the current hub.

  • ReadWrite (locations only) Since v6.1.5/2: Change the definition of locations, and view objects in the current hub.

  • ReadExecRefresh: Perform Refresh, Compare, start/stop jobs, and view objects in the hub.

  • ReadExec: Perform Compare, start/stop jobs, and view objects in the hub.

  • ReadOnly: Only view objects in the current hub.

A user who is created to access and manage the DSS system when setting up a hub server from a browser will automatically receive the SysAdmin access rights. The SysAdmin user can then create other users in the system and grant the required access permissions to them. The SysAdmin user needs to grant the required access permissions to a new user, otherwise, the user will not be able to access any resources and perform any actions in the DSS system.

Managing User Permissions

The permission level of a hub user can be managed from the web UI using option System ▶ Permissions or from command line interface (CLI) using either of the following options:

  • Repository level permissions can be managed using command dssreposconfig (option <b>-A</b>).
  • Hub level permissions can be managed using command dsshubconfig (option <b>-A</b>).