Home
Security
Perform tasks to secure your data on the Spectrum Technology Platform2022.1.0.
Roles
Spectrum Technology Platform comes with these some predefined roles.
Secured Entity Types - Context Graph
After you establish roles, you can determine the permissions granted to each role. The following entity types control permissions to parts of Spectrum Context Graph.

Welcome
Perform administrative tasks required to manage the operation of Spectrum Technology Platform on your system.
Getting Started
Configure and run a new installation of Spectrum Technology Platform.
Approval Flows
Define approval flows that data stewards use to review and accept records generated in a job by Exception Monitor.
Security
Perform tasks to secure your data on the Spectrum Technology Platform2022.1.0.
- Security Model
  Spectrum Technology Platform uses a role-based security model to control access to the system.
- Users
  Spectrum Technology Platform user accounts control the types of actions users can perform on the system.
- Roles
  Spectrum Technology Platform comes with these some predefined roles.
  - Creating a Role in Spectrum Management Console
    A role is a collection of permissions that you assign to a user. If the predefined roles that come with Spectrum Technology Platform do not fit your organization's needs, you can create your own roles.
  - Deleting a Role in Spectrum Management Console
    You can delete roles that are no longer used.
  - Secured Entity Types - Advanced Matching
    An entity type is a category of items to which you want to grant or deny access. The following entity types control access to parts of Spectrum Advanced Matching.
  - Secured Entity Types - Context Graph
    After you establish roles, you can determine the permissions granted to each role. The following entity types control permissions to parts of Spectrum Context Graph.
  - Secured Entity Types - Data Normalization
    An entity type is a category of items to which you want to grant or deny access.
  - Secured Entity Types - Data Stewardship
    An entity type is a category of items to which you want to grant or deny access. Approval flow types used to define approval flows are included here. The following permissions control access to Data Stewardship entity types.
  - Secured Entity Types - Database Resources
    An entity type is a category of items to which you want to grant or deny access.
  - Secured Entity Types - Discovery
    An entity type is a category of items to which you want to grant or deny access. The secured entity types for Discovery control access to the Discovery web application's modeling, profiling, lineage, and impact analysis features.
  - Secured Entity Types - Enterprise Data Integration
    An entity type is a category of items to which you want to grant or deny access.
  - Secured Entity Types - External Web Services
    An entity type is a category of items to which you want to grant or deny access.
  - Secured Entity Types - Platform
    An entity type is a category of items to which you want to grant or deny access.
  - Secured Entity Types - Resource Connection
    An entity type is a category of items to which you want to grant or deny access.
  - Secured Entity Types - Spectrum Spatial
    An entity type is a category of items to which you want to grant or deny access.
- Access Control
  Access control settings work in conjunction with roles to define the permissions for a user. Roles define the permissions for categories of entities, such as all dataflows or all database resources, and access control settings define the permissions for specific entities, called secured entities. Examples of secured entities include specific jobs or specific database connections. For example, you may have a role that has granted the Modify permission to the secured entity type "Dataflows", but you may want to prevent users from modifying one specific dataflow. You could accomplish this by using access control to remove the Modify permission for the specific dataflow you do not want modified. You can specify access control settings for users and roles. Access control settings for a user override that specific user's permissions as granted by the user's roles. Access control settings for roles apply to all users who have that role.
- Security for Spatial
- Limiting Server Directory Access
  You can browse the Spectrum Technology Platform server's folders when performing tasks that require them to select a file. For example, users can browse the server when selecting an input or output file in a source or sink stage in Spectrum Enterprise Designer.
- Using HTTPS
  Secure Socket Layer (SSL) is a protocol that provides security for communications between client and server by implementing encrypted data and certificate-based authentication.
- Web Service Authentication
  Spectrum Technology Platform web services require authentication with valid user credentials. There are two methods for authenticating: Basic authentication and authentication by token.
- Using LDAP or Active Directory for Authentication
  Spectrum Technology Platform can be configured to use an LDAP or Active Directory server for authentication.
- Implementing Spectrum Single Sign-on (SSO)
  Spectrum Technology Platform provides single sign-on (SSO), leveraging Active Directory Federation Services (AD FS), Ping Identity, and Azure Identity Provider (IDP).
- Encryption
Data Sources
Configure data sources from which to load and process data in Spectrum Technology Platform2022.1.0.
Spectrum Databases
Manage databases that contain data from trusted data providers. These include databases used by Enterprise Tax, Geocoding, Global Sentry, Universal Addressing, Spatial and Routing.
Services
Access Spectrum Services through a REST or SOAP web service interface.
Flows
Schedule and manage job execution, options, and defaults.
Performance
Perform tasks to get optimal performance from your Spectrum Technology Platform environment.
Monitoring
Monitor system performance and configure notification and use system and audit logs.
Backup and Restore
Schedule or create backups and restore the Spectrum Technology Platform server.
Settings
View and configure Data Stewardship and Context Graph settings.
Administration Utility
Use the Administration Utility Command Line Interface (CLI) to manage Spectrum components and data.
Spectrum properties
Reference information for spectrum-container.properties properties and proxy server settings.
About Spectrum Technology Platform
An overview of Spectrum, its data management architecture, its platform architecture, and its modules and components.

Secured Entity Types - Context Graph

After you establish roles, you can determine the permissions granted to each role. The following entity types control permissions to parts of Spectrum Context Graph.

Administration

Controls the ability to perform these actions for Context Graph settings in Spectrum Management Console.

View: Allows users to view Context Graph settings.
Modify: Allows users to modify Context Graph settings.

Model Data

Controls the ability to perform actions for Context Graph stages, Context Graph Visualization, and Context Graph Browser:

View: Allows users to view a model.
Create: Allows users to create models, including entities, relationships, and properties.
Modify: Allows users to modify a models entity and relationship properties.
Delete: Allows users to delete models, entities, relationships and properties.
Note: This permission includes clearing a model in the Write to Model stage.

Model Metadata

Controls the ability to perform actions for Context Graph stages, Context Graph Visualization, and Context Graph Browser:

View: Allows users to view model metadata.
Create: Allows users to create model metadata.
Modify: Allows users to modify model metadata entity and relationship properties.
Delete: Allows users to delete model metadata.

Query

Controls the ability to perform actions for Context Graph Browser, Context Graph Visualization.

Create: Allows users to create queries for models.
View: Allows users to view queries for models.
Modify: Allows users to modify queries for models.
Delete: Allows users to delete queries for models.

Query Custom Script

Controls the ability to use custom scripts to perform queries in Context Graph Visualization.

Execute: Allow users to execute custom scripts.

Theme

Controls the ability to perform the following actions in Context Graph Visualization.

Create: Allows users to create themes for models.
View: Allows users to view themes for models.
Modify: Allows users to modify themes for models.
Delete: Allows users to delete themes for models.