Create a new permission rule

Learn how to create a permission rule in the Metadata Security application to control role-based access to resources and data in your Reltio tenant.

The Metadata Security application in Reltio Console provides a guided wizard for creating permission rules without manually editing JSON configurations or making API requests. The wizard guides you through selecting a role, choosing a rule type, defining the resource scope and applicable permissions, and reviewing the rule before saving it.

You can create any of the following rule types based on your security requirements:

Resource security rule
Data security rule
Source security rule
Hide attribute rule

All the procedures are part of the same wizard workflow and are not independent tasks.

Prerequisites

Before you begin, make sure you meet the following requirements:

You have access to the Metadata Security application in Reltio Console.
You have selected the appropriate tenant and environment in Reltio Console.
You have identified the role, resource, and access permissions for the rule you want to create.

To create a new permission rule

Log in to Reltio.
The Hub appears.
Select the Applications icon, and select Console.
The Console appears.
In the Security section, select Metadata Security.
The Metadata Security page appears, displaying the Manage Security Config feature by default.
Select +New rule.

The New permission rule dialog box appears.
Select the required role and select Next.
Select the required rule type:
- Resource security: Defines the actions a role can perform on a resource.
- Data security: Restricts access to data based on attribute filter conditions.
- Source security: Restricts read access to data based on its contributing source systems.
- Hide attribute: Hides specific entity or relationship attributes by assigning no access permissions.

To create a Resource security rule

In the New permission rule dialog box, select the required resource kind:
- Entire configuration
- Entity types
- Relationship types
- Graph types
- Interaction types
- Change request types
- Grouping types
For the selected resource kind (not applicable for Entire configuration), select either of the following resource scopes:
- All resource types: Applies the rule to all types within the selected resource kind.
- Specific type: Search for and select the required resource type. For Entity types, you can further select all attributes or select a required set of attributes.
Select Next.
Select the required Access permissions.
Review your selections.
Select Save as draft.
The rule is saved as a draft and the Manage Security Config appears.

To create a Data security rule

In the New permission rule dialog box, select Entity types or Relationship types.
Use the search bar to find and select the required entity or relationship type.
Perform either of the following actions based on the selected resource kind:
- Entity Type: Select all attributes or select the required set of attributes.
- Relationship Type: Select a specific relationship type.
Select Next.
In the Access & Filter step, perform the following actions:
1. Select the required Access permissions.
2. Enter the filter expression in the Data filter field.
Review your selections.
Select Save as draft.
The rule is saved as a draft and the Manage Security Config appears.

To create a Source security rule

In the New permission rule dialog box, select Entity types or Relationship types.
Select the scope of the rule:
- All entity types or All relationship types: Applies the rule to all types and corresponding attributes in the selected resource kind.
- Specific type: Use the search bar to find and select the required entity or relationship type. For entity types, you can further select all attributes or select a required set of attributes.
Select Next.
In the Access & Sources step, perform the following actions:
1. Select the required Access permission.
2. Select the required sources.
3. In Match sources with, select one of the following options:
  - AND (all selected): Matches records that meet all selected source conditions.
  - OR (any selected): Matches records that meet at least one selected source condition.
Review your selections.
Select Save as draft.
The rule is saved as a draft and the Manage Security Config appears.

To create a Hide attribute rule

In the New permission rule dialog box, select Entity attributes or Relationship attributes.
Use the search bar to find and select the required entity or relationship attribute.
Select Next.
Review your selections.
Select Save as draft.
The rule is saved as a draft and the Manage Security Config appears.

To save your changes

Review your changes on the Manage Security Config page.
Select Save Changes.
The Save changes dialog box appears.
Review your changes and select Save.

Result

After you successfully save the new permission rule, the application updates the security configuration through the Permissions Configuration APIs. The new rule appears under the selected role on the Manage Security Config page, where you can review its resource path, access permissions, and applicable conditions.

Verification steps

To verify the new permission rule, review it under the selected role on the Manage Security Config page. You can also use Roles on a resource to review which roles have permission rules for the selected resource, or Record access to check which roles can perform specific actions on entity or change request records.

Unify and manage your data

Create a new permission rule

Footer