Using Permissions and Roles to Manage Access to the Registry
Permissions determine which operations users can perform and which set of objects they can access. There are two types of permissions in CentraSite: instance-level permissions and role-based permissions.
Instance-level permissions enable access to one specific instance of an object in the registry. They provide fine-grain access control over registry objects. You grant instance-level permissions directly to individual users or to groups.
Role-based permissions enable access to an entire class of objects or give users the ability to perform certain operations in
CentraSite. Role-based permissions provide coarse-grain control over objects in the registry. You assign role-based permissions to roles, and you assign the roles to individual users or groups.
The following diagram illustrates the relationships between instance-level permissions, role-based permissions, users, groups and roles.
