Migrating the Manage workspace permission
The Manage workspace permission has been replaced with a new permission model that combines a new user permission (also called individual permission) Connections and Resources – Edit (ID: TMC_CONNECTION_RESOURCE_EDIT) and existing workspace permission, Author or View.
This change allows Talend Management Console to align its permission model with the Qlik Management Console permission structure, which is a standard RBAC (Role-Based Access Control) model. In this model, user permissions determine what can be accessed, and workspace permissions determine where content can be accessed.
Permission model changes
The old Manage workspace permission allows you to create, edit, and delete connections and resources assigned to a specific workspace. With the new model, the Manage workspace permission no longer exists. Its allowed operations are allocated to the following entitlement combinations:
| User permission | Workspace permission | Allowed actions |
|---|---|---|
| Connections and Resources – Edit | Author | Create, edit, delete, and view connections and resources |
| Connections and Resources – Edit | View | View connections and resources only |
Impact on existing users
The removal of the Manage workspace permission can affect all users, whether you previously had the Manage workspace permission or not.
The image shows how the user permissions and workspace permissions change along with the removal of the Manage workspace permission. More details are provided below:
- Users previously granted the Manage permission:
- You automatically receive the Connections and Resources – Edit user permission, which is included in the new Assets Manager user role that is assigned to you by default.
- If you have the Author permission, you retain the ability to create, edit, delete, and view connections and resources in the workspace.
- If you do not have the Author permission, you lose the
ability to create, edit, or delete connections and resources. If you have the
View permission, you can still see and use these
connections and resources, but you cannot create, edit, or delete them.
For instructions about how to restore the edit ability, see Restoring the edit access.
- Users without the Manage permission:
- You need to be granted the Connections and Resources –
Edit user permission to continue to view and assign connections
and resources in the workspaces where you have the
Author permission.
However, when you obtain Connections and Resources – Edit, your permissions are inadvertently expanded. You automatically gain the ability to create, edit, and delete connections and resources in those workspaces. You also gain the ability to view resources and connections in any workspace where you have the View permission.
For instructions about how to restrict the expanded permissions and restore the original access boundaries, see Restricting the expanded permissions and restoring the original access scope.
- You need to be granted the Connections and Resources –
Edit user permission to continue to view and assign connections
and resources in the workspaces where you have the
Author permission.