# Talend Management Console

## Upcoming changes for UI

In future releases, Talend Management Console will mask the webhook URL for a task or plan trigger, displaying it as \*\*\*\*\*\*\*, for users who do not have Operator (Execute) permission on the space. Users with this permission will continue to see the full webhook URL.

For more information, see [Webhooks in Talend Management Console](https://help.qlik.com/talend/en-US/management-console-user-guide/Cloud/webhooks-in-talend-cloud-management-console) and [Generating a webhook URL](https://help.qlik.com/talend/en-US/management-console-user-guide/Cloud/generating-webhook-url).

## Upcoming changes for API

The [run-config](https://talend.qlik.dev/apis/orchestration/2021-03/#operation_get-plan-configuration) response returned for task and plan executables will mask the webhook trigger url as \*\*\*\*\*\*\* for callers who do not have Operator (Execute) permission on the space. Callers with this permission will continue to receive the full URL.

Before:

```
{
   "trigger": {
      "webhook": {
         "name": "wh",
         "triggerCalls": 10,
         "triggerTimeout": 30000,
         "runAsUser": "myuser",
         "runAsUserType": "HUMAN",
         "url": "https://webhooks.eu.cloud.talend.com/mywebhook/<webhook-id>"
      }
   }
}
```

After, for callers without Operator (Execute) permission on the space:

```
{
   "trigger": {
      "webhook": {
         "name": "wh",
         "triggerCalls": 10,
         "triggerTimeout": 30000,
         "runAsUser": "myuser",
         "runAsUserType": "HUMAN",
         "url": "*******"
      }
   }
}
```

## What you should do

If you have automation, integrations, or service accounts that read the webhook URL through the API, grant them Operator (Execute) permission on the relevant space before this change takes effect. Otherwise, they will receive the masked value instead of the webhook URL.

## New features

| Feature | Description |
| --- | --- |
| Improvements for paused tasks in plans | When you pause a task that is used in one or more plans, the pause dialog now<br>lists the affected plans and lets you filter them by name and space.<br><br>The plan details page also shows a warning when a plan contains paused tasks. |
| SSO configuration access with the SSO - Manage permission | Users with the SSO - Manage permission<br>(ID: TMC\_SSO\_MANAGEMENT) can now access and configure SSO<br>settings in<br>Users & Security &gt; Authentication<br>without requiring the full Security Administrator<br>role.<br><br>To grant SSO configuration access to specific users, add the SSO -<br>Manage permission to any custom role.<br><br>The Security Administrator predefined role still<br>includes this permission.<br><br>For more information, see [SSO configuration](https://help.qlik.com/talend/en-US/sso-single-sign-on-config). |