Home
Security
Perform tasks to secure your data on the Spectrum Technology Platform2022.1.0.
Users
Spectrum Technology Platform user accounts control the types of actions users can perform on the system.
Adding a User through Spectrum Management Console
This procedure describes how to create a Spectrum Technology Platform user account and assign a role to the account.

Welcome
Perform administrative tasks required to manage the operation of Spectrum Technology Platform on your system.
Getting Started
Configure and run a new installation of Spectrum Technology Platform.
Approval Flows
Define approval flows that data stewards use to review and accept records generated in a job by Exception Monitor.
Security
Perform tasks to secure your data on the Spectrum Technology Platform2022.1.0.
- Security Model
  Spectrum Technology Platform uses a role-based security model to control access to the system.
- Users
  Spectrum Technology Platform user accounts control the types of actions users can perform on the system.
  - Adding a User through Spectrum Management Console
    This procedure describes how to create a Spectrum Technology Platform user account and assign a role to the account.
  - Changing a Password
    This procedure describes how to change a user's password.
  - Setting a Minimum Password Length
    The minimum password length is enforced when creating or changing a password. Existing passwords that are shorter than the minimum length will continue to be valid.
  - Changing Your Email Address
    The email address associated with your user account will receive notifications by some Spectrum Technology Platform modules.
  - Disabling a User Account
    You have the option to disable a user account to prevent access to Spectrum Technology Platform.
  - Deleting a User through Spectrum Management Console
    You have the option to permanently delete user accounts.
  - Locking User Accounts
    As a security precaution, user accounts are disabled after five unsuccessful authentication attempts in row. This includes unsuccessful authentication attempts to Spectrum Enterprise Designer, Spectrum Management Console, web services, and the Client API.
  - Logging Out Inactive Sessions
    Users of Spectrum Enterprise Designer and web clients such as Spectrum Management Console, Relationship Analysis Client, Data Stewardship, and others, are automatically logged out after 30 minutes of inactivity. You will see a warning message that your session will expire before you are logged out of the system.
  - Password Support Through JMX Console
    JMX Console provides a set of attributes that give you control over the structure of your Spectrum Technology Platform system passwords.
- Roles
  Spectrum Technology Platform comes with these some predefined roles.
- Access Control
  Access control settings work in conjunction with roles to define the permissions for a user. Roles define the permissions for categories of entities, such as all dataflows or all database resources, and access control settings define the permissions for specific entities, called secured entities. Examples of secured entities include specific jobs or specific database connections. For example, you may have a role that has granted the Modify permission to the secured entity type "Dataflows", but you may want to prevent users from modifying one specific dataflow. You could accomplish this by using access control to remove the Modify permission for the specific dataflow you do not want modified. You can specify access control settings for users and roles. Access control settings for a user override that specific user's permissions as granted by the user's roles. Access control settings for roles apply to all users who have that role.
- Security for Spatial
- Limiting Server Directory Access
  You can browse the Spectrum Technology Platform server's folders when performing tasks that require them to select a file. For example, users can browse the server when selecting an input or output file in a source or sink stage in Spectrum Enterprise Designer.
- Using HTTPS
  Secure Socket Layer (SSL) is a protocol that provides security for communications between client and server by implementing encrypted data and certificate-based authentication.
- Web Service Authentication
  Spectrum Technology Platform web services require authentication with valid user credentials. There are two methods for authenticating: Basic authentication and authentication by token.
- Using LDAP or Active Directory for Authentication
  Spectrum Technology Platform can be configured to use an LDAP or Active Directory server for authentication.
- Implementing Spectrum Single Sign-on (SSO)
  Spectrum Technology Platform provides single sign-on (SSO), leveraging Active Directory Federation Services (AD FS), Ping Identity, and Azure Identity Provider (IDP).
- Encryption
Data Sources
Configure data sources from which to load and process data in Spectrum Technology Platform2022.1.0.
Spectrum Databases
Manage databases that contain data from trusted data providers. These include databases used by Enterprise Tax, Geocoding, Global Sentry, Universal Addressing, Spatial and Routing.
Services
Access Spectrum Services through a REST or SOAP web service interface.
Flows
Schedule and manage job execution, options, and defaults.
Performance
Perform tasks to get optimal performance from your Spectrum Technology Platform environment.
Monitoring
Monitor system performance and configure notification and use system and audit logs.
Backup and Restore
Schedule or create backups and restore the Spectrum Technology Platform server.
Settings
View and configure Data Stewardship and Context Graph settings.
Administration Utility
Use the Administration Utility Command Line Interface (CLI) to manage Spectrum components and data.
Spectrum properties
Reference information for spectrum-container.properties properties and proxy server settings.
About Spectrum Technology Platform
An overview of Spectrum, its data management architecture, its platform architecture, and its modules and components.

Adding a User through Spectrum Management Console

This procedure describes how to create a Spectrum Technology Platform user account and assign a role to the account.

To add a user account and assign a role to it:

Open Spectrum Management Console.
Go to System > Security.
Click the Add button .
Leave the Enabled switch set to On if you want this user account to be available for use.
Enter the user name in the User name field.

Note: User names can only contain ASCII characters. User names are case sensitive.
Enter the user's email address in the Email address field. The email address is used by some modules to send notifications to users.
Enter a description of the user in the Description field.
Enter and confirm the user's password.
Select the roles you want to give to this user.

You may create your own roles or use one of the default roles. The default roles are:

admin

This role has full access to all parts of the system.

designer

This role is for users that create dataflows and process flows in Spectrum Enterprise Designer. It provides the ability to design and run dataflows.

integrator

This role is for users who need to process data through Spectrum Technology Platform but do not need to create or modify dataflows. It allows the user to access services through web services and the API, and to run jobs.

user

This is the default role. It provides no access to the system. Users who have this role will only gain access to the system if you grant permission through secured entity overrides.

For information about creating roles, see Creating a Role in Spectrum Management Console.
Click Save.