Use the predefined roles

If the authentication and access management with PassPort has been activated for the Datastore instance, you can use the predefined roles that were automatically imported.

Role Description Associated predefined privileges

IP_RUNTIME_Administrator

Administrator allowed to perform all actions
  • folderExecuteAll
  • folderViewAll
  • selectAllEditors
  • administrationExecuteAll
  • dataManagementExecuteAll
  • businessObjectStatusUpdateAll
  • businessCollectionStatusUpdateAll
  • objectEditorExecuteAllActions
  • collectionEditorExecuteAllActions
  • businessCollectionExecuteAllActions
  • businessObjectExecuteAllActions
  • propertyViewAll
  • reportViewAll
IP_RUNTIME_Corrector Corrector allowed to perform only some of the actions on Collection and Objects
  • folderViewCorrector
  • businessObjectStatusUpdateAll
  • businessCollectionStatusUpdateAll
  • folderExecuteCorrector
  • dataManagementExecuteAll
  • selectAllEditors
  • objectEditorExecuteAllActions
  • collectionEditorExecuteAllActions
  • businessCollectionExecuteCorrector
  • businessObjectExecuteAllActions
  • propertyViewAll
  • reportViewAll
IP_RUNTIME_Supervisor Supervisor allowed to change the status of Collection and Objects
  • folderViewAll
  • folderExecuteSupervisor
  • selectAllEditors
  • businessObjectStatusUpdateAll
  • businessCollectionStatusUpdateAll
  • objectEditorExecuteAllActions
  • collectionEditorExecuteAllActions
  • businessCollectionExecuteActionsSuperviser
  • businessObjectExecuteActionsSuperviser
  • propertyViewAll
  • reportViewAll
IP_DESIGNER_Administrator Designer Administrator allowed to perform all actions
  • folderExecuteAll
  • folderViewAll
  • selectAllEditors
  • administrationExecuteAll
  • dataManagementExecuteAll
  • businessObjectStatusUpdateAll
  • businessCollectionStatusUpdateAll
  • objectEditorExecuteAllActions
  • collectionEditorExecuteAllActions
  • businessCollectionExecuteAllActions
  • businessObjectExecuteAllActions
  • propertyViewAll
  • reportViewAll
IP_DESIGNER_Corrector

Designer Corrector allowed to perform only some of the actions on business Collections and Objects

  • folderViewCorrector
  • businessObjectStatusUpdateAll
  • businessCollectionStatusUpdateAll
  • folderExecuteCorrector
  • dataManagementExecuteAll
  • selectAllEditors
  • objectEditorExecuteAllActions
  • collectionEditorExecuteAllActions
  • businessCollectionExecuteCorrector
  • businessObjectExecuteAllActions
  • propertyViewAll
  • reportViewAll
Datastore_Administrator Administrator allowed to perform all actions on Datastore
  • queryView
  • queryFolderView
  • queryExecute
  • queryUpdate
  • queryDelete
  • queryCreate
  • queryFolderCreate
  • queryFolderDelete
AISuiteAdministration_Administrator Administrator role allowed to perform all actions
  • updateConfiguration

Also refer to "Predefined default roles" in the Datastore Security Guide.

Related Links