Unify and manage your data

ROLE_ADMIN_CUSTOMER Access permissions

Learn about ROLE_ADMIN_CUSTOMER role to manage access permissions for tenants nd user operations.

Assign roles to user and group accounts to grant them permissions (access rights and privileges). For more information, see topic System roles.

ROLE_ADMIN_CUSTOMER is a critical high-privilege system role as it grants full admin-level access permissions for all customer tenants and all user management operations (such as users, groups, roles). For a definition of what customer means in this context, see Terminology).

Each user granted the ROLE_ADMIN_CUSTOMER system role is automatically granted the ROLE_ADMIN_TENANT system role for each tenant registered for that customer. In other words, a customer admin is also a tenant admin for each of the customer's tenants.

You can grant this system role for each customer object your organization has registered in Auth in either of the following ways:
  • the admin of the customer under which this user is registered: ROLE_ADMIN_CUSTOMER

  • multiple customer objects: append the customer ID for each customer object:

    ROLE_ADMIN_CUSTOMER_<customer-id> .

    For example:
    • ROLE_ADMIN_CUSTOMER_CustomerUSEmployees
    • ROLE_ADMIN_CUSTOMER_CustomerAsiaEmployees

This table identifies the Reltio access permissions for Reltio services, resources, and sub resources defined for the ROLE_ADMIN_CUSTOMER system role.

Permissions forAccess rights (service/ resource/ sub resource)Access privileges
Accessing the audit logAuth.audit.export
  • READ/EXECUTE
Managing customer users, roles and tenantsAuth.customer
  • CREATE/READ/UPDATE/DELETE
Managing system rolesAuth.globalRoles
  • READ
Accessing the authentication audit logAuth.monitoring
  • READ
Accessing all Reltio servicesAuth.reltioServices
  • READ
Accessing UI modeler details in the consoleconsole.uimodeler
  • READ/UPDATE
Configuring image hosting for the tenantih.config
  • CREATE/READ/UPDATE/DELETE
Uploading images to an external storage and evaluating the preview and thumbnail for itih.image
  • CREATE/DELETE
Managing parameters and monitoring serviceih.version
  • READ/UPDATE
Accessing recommendation service management for search facetsrecommender.management
  • CREATE/READ/UPDATE/DELETE
Accessing recommendation queryingrecommender.recommendation
  • CREATE/READ
Accessing recommendation service statusrecommender.status
  • READ
Accessing APIs related to RIH proxyRIH.proxy
  • CREATE/READ/UPDATE/DELETE/EXECUTE