Set up asset permissions in shared IDMC environment

Working in a shared environment

UW-Madison operates under a single shared Informatica Data Management Cloud (IDMC) org for each environment (test and production). This means that you might see other objects in IDMC, such as projects, connections, and schedules, that belong to other areas of the university.

Using asset permissions to control access with user groups

When you create a new project, make sure you edit the permissions to limit who can view and change the assets within the project. If no permissions are configured on a project or the assets within it, anybody who has access to IDMC will be able to view, change, run, and delete the contents of the project. If ONE specified user has permissions on the project or asset, NO OTHER PERSON can view, change, run, or delete the contents. Use the group that was sent to you when you were granted access to IDMC to control who can access the contents of the project.

1. Right-click on a project folder and click "Permissions..."
   • 
2. Click "Add" to bring up the group selection menu.
   • 
3. Select the group for your team and click "Add".
   • 
4. Click the check boxes for Read, Update, Delete, Execute, and Change Permission.
   • 
5. Click Save.

Using user groups to simplify permissions

User groups are collections of multiple users that can be used to simplify the process of setting up asset permissions. Teams integrating in IDMC will have a user group set up for them and be placed in it. When setting asset permissions, it is standard practice to set permissions by group rather than by individual user, to make deprovisioning of users smoother and ensure assets are accessible by the remaining team members.

If you do not believe your team has a user group set up, contact the Integration Team at integration-platform@doit.wisc.edu. For more information on user groups, see the Informatica documentation on user groups.

Namespace projects with your group name

Even though you might not have any permissions on a project, you can still see that the project exists when browsing all projects. To help organize the constantly growing list of projects, we recommend that you prefix your group name before the name of the project: {group name}-{project name}

Example: DoIT_AIS_Enterprise_Integration-Salesforce_Integrations

This structure allows you to search your group name in the project explorer to see only your group's projects. You can create subfolders within a project if further organization or hierarchy is needed.

Your group name was sent to you when you were granted access to IDMC, and you can also find it by editing the permissions for an existing project.