The following methods of access control for MDM dictionary elements are available:
Discretionary access control. The method is based on using access control lists assigned to each system object. It is available if the Elements Have Discretionary Access Permissions checkbox is selected on the Description tab.
Mandatory access control. It is based on assigning access labels to system subjects and objects. It is available if the Elements Have Mandatory Access Permissions checkbox is selected on the Description tab.
Attribute-based access control. It is based on using policies sets and access rules. It is available if the Elements Have Attribute-Based Access Permissions checkbox is selected on the Description tab.
It is allowed to apply these methods individually and together: discretionary and mandatory access controls or discretionary and attribute-based access controls.
NOTE. Access permissions can be set if access control is used and the user has privilege to change permissions.
If the roles of the information security administrator and the application administrator are separated, by default, only the information security administrator may change access permissions using the security manager.
Setup is executed in the Access Permissions dialog box:
To set up discretionary access control
To set up mandatory access control
To set up attribute-based access control
To set up order of access permissions application
See also:
