Configuring user access

In this recipe, I will show you how to configure your access as a fresh ETL developer in a Data Services environment. We will create a user account, assign all the required functional privileges, and assign owner privileges for our local Data Services repository. In a multiuser development environment, you would require to perform this step for every newly created user.

Getting ready…

Choose the username and password for your ETL developer user account. We will log in to the CMC application to create a user account and grant it the required set of privileges.

How to do it…

1. Launch the Central Management Console web application.
2. Go to Users and Groups.
3. Click on Create a user button (see the following screenshot):
   
4. In the opened window, choose a username (we picked etl) and password. Also, select the Password never expires option and unselect User must change password at next logon. Choose Concurrent User as the connection type.
5. Now, we should add our newly created account to two pre-existing user groups. Right-click on the user and choose the Member Of option in the right-click menu.
6. Click on the Join Group button in the newly opened window and add two groups from the group list to the right window panel: Data Services Administrator Users and Data Services Designer Users. Click on OK.
7. From the left-side instrument panel, click on the CMC Home button to return to the main CMC screen.
8. Now, we have to grant our user extra privileges on the local repository. For this, open the Data Services section, right-click on DS4_REPO, and choose User Security from the context menu.
9. Click on the Add principals button, move the etl user to the right panel and click on the Add and Assign Security button at the bottom of the screen.
10. On the next screen, assign the full control (owner) access level on the Access Levels tab and go to the Advanced tab.
11. Click on the Add/Remove Rights link and set the following two options that appear to Granted for the Data Services Repository application (see the following screenshot):
    
12. Click on OK in the Assign Security window to confirm your configuration.
13. As a test, log out of the CMC and log in using a newly created user account.

How it works…

In a complex enterprise environment, you can create multiple groups for different categories of users. You have full flexibility in order to provide users with various kinds of permissions, depending on their needs.

Some users might require administration privileges to start/stop services and to manage repositories without the need to develop ETL and access Designer.

The ETL developer role might require only permissions for the Designer tool to develop ETL code.

In our case, we have created a single user account that has both administration and developer privileges.