Skip to content

0423 Security Definitions

Security, particularly access control, is an important form of governance that preserves exclusive access to specific resources for particular actors.

UML

UserAccount relationship

The UserAccount relationship links a UserIdentity entity that describes a userId with the SecretsCollection where the user's account is defined.

  • label - Display label to use when displaying this lineage relationship in a lineage graph.
  • description - Description of the element or associated resource in free-text.

ResourcePermissions relationship

The ResourcePermissions relationship links a SecurityAccessControl with the SecretsCollection where the security access control is defined.

  • label - Display label to use when displaying this lineage relationship in a lineage graph.
  • description - Description of the element or associated resource in free-text.

SecurityAccessControl entity

The SecurityAccessControl entity is a type of GovernanceControl that defines the access control lists that a user must belong to if he/she/it is to be given permission to execute a specific command.

ServiceAccessControl entity

The ServiceAccessControl entity is a type of SecurityAccessControl that describes the permissions associated with a service. This may cover a server or a service. The mappingProperties are used to define the exact scope that the control refers to.

  • mappingProperties - Additional properties to aid the mapping to the element in an external resource.

SecretsCollectionSecurityList relationship

The SecretsCollectionSecurityList relationship links a SecurityList with the SecretsCollection where the security list is defined.

  • label - Display label to use when displaying this lineage relationship in a lineage graph.
  • description - Description of the element or associated resource in free-text.

SecurityList entity

The SecurityList entity defines a list of users and nested lists that are included in a set of permissions associated with a security access control. It is a specialized type of Collection so the lists can be nested using the CollectionMembership relationship.

  • distinguishedName - The LDAP distinguished name (DN) that gives a unique positional name in the LDAP DIT.

SecurityGroup entity

The SecurityGroup entity defines a group of users and groups that are related.

SecurityRole entity

The SecurityRole entity defines a collection of users that requires the same permissions to perform the same work (role).

  • distinguishedName - The LDAP distinguished name (DN) that gives a unique positional name in the LDAP DIT.

AssociatedSecurityList relationship

The AssociatedSecurityList relationship defines which SecurityList to use for each type of operation defined by the SecurityAccessControl entity. The operationName attribute defines the name of the operation being mapped.

  • operationName - Name of the operation to that is controlled by the linked security group.

SecurityListMembership classification

The SecurityListMembership classification summarizes the list of security groups that a user should be granted. For efficiency, each security group may be identified by its distinguishedName property for efficiency. However, it may be the group's qualifiedName. The SecurityGroupMembership classification is attached to one of the user's UserIdentity entities.

  • securityGroups - List of security group names.

  • securityRoles - List of security role names.

SecurityTags classification

SecurityTags identify labels and properties that are used in determining which access control rules should be executed when access to a particular resource is requested. They can be attached to assets, schema elements and glossaries depending on the scope of resource that the security tags apply to. The synchronized access control feature describes how security tags are set up and used.

  • securityLabels - Labels that apply to the referenceable.
  • securityProperties - Properties that apply to the referenceable.

Raise an issue or comment below