Metadata security overview
Learn about how the Metadata Security application in Reltio Console simplifies permission management and helps you review role-based access to resources and records.
Metadata security controls access to resources and records in your Reltio tenant through role-based permission rules. Managing these permissions requires working with complex JSON configuration files and the Permissions Configuration APIs.
The Metadata Security application in Reltio Console provides a visual interface for managing these permissions without directly editing JSON or making API calls. It brings your existing roles and their associated permission rules into a single workspace, where you can review, create, edit, and remove rules. This reduces the effort required to maintain permissions and helps you review access rules before and after making changes.
The application is designed for the following users:
Manage Security Config
The Manage Security Config page provides a centralized view of the roles in your tenant and their associated permission rules. You can search for a role and review its permissions, organized by resource hierarchy. Each rule displays information about the resource, access permissions, and applicable conditions.
In addition to reviewing existing permissions, you can create new rules, edit or remove existing rules, and manage access using the following rule types:
- Resource security: Defines the actions a role can perform on a resource.
- Data security: Restricts access to data based on attribute filter conditions.
- Source security: Restricts read access to data based on its contributing source systems.
- Hide attribute: Hides specific entity attributes by assigning no access permissions.
The page also supports importing and exporting permission configurations in CSV format, allowing you to review configurations outside the application or perform bulk changes.
Roles on a resource
The Roles on a resource page provides a resource-centric view of metadata security permissions. Instead of reviewing permissions for individual roles, you can select a configuration resource and identify which roles have permission rules defined for it.
For entity types and relationship types, you can inspect permissions at the attribute level. This view helps you understand how permissions are distributed across roles for a particular resource, making it easier to review access controls and investigate unexpected access restrictions.
Record access
The Record access page provides a way to review which roles can perform specific actions on individual entity or change request records. You can enter one or more record IDs and select the actions to evaluate.
The results identify which roles have access to the selected records for each evaluated action. This helps you validate effective permissions and investigate access issues without making separate API requests.