- PrivaceraCloud Release 4.5
- PrivaceraCloud User Guide
- PrivaceraCloud
- What is PrivaceraCloud?
- Getting Started with Privacera Cloud
- User Interface
- Dashboard
- Access Manager
- Discovery
- Usage statistics
- Encryption and Masking
- Privacera Encryption core ideas and terminology
- Encryption Schemes
- Encryption Schemes
- System Encryption Schemes Enabled by Default
- View Encryption Schemes
- Formats, Algorithms, and Scopes
- Record the Names of Schemes in Use and Do Not Delete Them
- System Encryption Schemes Enabled by Default
- Viewing the Encryption Schemes
- Formats, Algorithms, and Scopes
- Record the Names of Schemes in Use and Do Not Delete Them
- Encryption Schemes
- Presentation Schemes
- Masking schemes
- Create scheme policies on PrivaceraCloud
- Encryption formats, algorithms, and scopes
- Deprecated encryption formats, algorithms, and scopes
- PEG REST API on PrivaceraCloud
- PEG API Endpoint
- Request Summary for PrivaceraCloud
- Prerequisites
- Anatomy of a PEG API endpoint on PrivaceraCloud
- About constructing the datalist for /protect
- About deconstructing the response from /unprotect
- Example of data transformation with /unprotect and presentation scheme
- Example PEG REST API endpoints for PrivaceraCloud
- Audit details for PEG REST API accesses
- Make calls on behalf of another user on PrivaceraCloud
- Privacera Encryption UDF for masking in Databricks
- Privacera Encryption UDFs for Trino
- Syntax of Privacera Encryption UDFs for Trino
- Prerequisites for installing Privacera Crypto plug-in for Trino
- Variable values to obtain from Privacera
- Determine required paths to crypto jar and crypto.properties
- Download Privacera Crypto Jar
- Set variables in Trino etc/crypto.properties
- Restart Trino to register the Privacera Crypto UDFs for Trino
- Example queries to verify Privacera-supplied UDFs
- Azure AD setup
- Launch Pad
- Settings
- General functions in PrivaceraCloud settings
- Applications
- About applications
- Azure Data Lake Storage Gen 2 (ADLS)
- Athena
- Privacera Discovery with Cassandra
- Databricks
- Databricks SQL
- Dremio
- DynamoDB
- Elastic MapReduce from Amazon
- EMRFS S3
- Files
- File Explorer for Google Cloud Storage
- Glue
- Google BigQuery
- Kinesis
- Lambda
- Microsoft SQL Server
- MySQL for Discovery
- Open Source Spark
- Oracle for Discovery
- PostgreSQL
- Power BI
- Presto
- Redshift
- Redshift Spectrum
- Kinesis
- Snowflake
- Starburst Enterprise with PrivaceraCloud
- Starburst Enterprise Presto
- Trino
- Datasource
- User Management
- API Key
- About Account
- Statistics
- Help
- Apache Ranger API
- Reference
- Okta Setup for SAML-SSO
- Azure AD setup
- SCIM Server User-Provisioning
- AWS Access with IAM
- Access AWS S3 buckets from multiple AWS accounts
- Add UserInfo in S3 Requests sent via Dataserver
- EMR Native Ranger Integration with PrivaceraCloud
- Spark Properties
- Operational Status
- How-to
- Create CloudFormation Stack
- Enable Real-time Scanning of S3 Buckets
- Enable Discovery Realtime Scanning Using IAM Role
- How to configure multiple JSON Web Tokens (JWTs) for EMR
- Enable offline scanning on Azure Data Lake Storage Gen 2 (ADLS)
- Enable Real-time Scanning on Azure Data Lake Storage Gen 2 (ADLS)
- How to Get Support
- Coordinated Vulnerability Disclosure (CVD) Program of Privacera
- Shared Security Model
- PrivaceraCloud
- PrivaceraCloud Previews
- Privacera documentation changelog
User Management
User Management creates and manages portal users. Portal users are identified by username, password, and role and allowed to access your PrivaceraCloud account.
Portal users are assigned a Role. Each Role establishes a set of permissions.
Role | Description and Permissions |
---|---|
ROLE_ACCOUNT_ADMIN | General administrator for Account. All permissions, including Account User Management. |
ROLE_POLICY_ADMIN | Administrator for establishing policy. |
ROLE_USER | Can access data as established by Policies. |
ROLE_POLICY_AUDITOR | Can review Audit information, but can not review data directly. |
ROLE_DISCOVERY_ALL | All permissions to Discovery module. |
ROLE_DISCOVERY_STEWARDS | All permissions to Discovery module except Delete functionality. |
ROLE_DISCOVERY_GOVERNANCE | Read-only permission to Discovery module. |
ROLE_DISCOVERY_READ | Read-only permission to Discovery module. |
ROLE_DISCOVERY_READ_RESTRICTED | Read-only permission to Discovery module along with hiding sample values of classifications. |
Portal users are not the same as data access users who are consumers of information stored in the data repositories.
Data access users are managed in Access Manager: Users/Groups/Roles.
Your account is created with a single ROLE_ACCOUNT_ADMIN role user with registered user's username and password, referred to as the Account Admin. The Account Admin (and any User with the role ROLE_ACCOUNT_ADMIN) can create additional portal users.
Add users
On the Privacera home page, expand the Settings menu and click on User Management from left menu.
Click +Add.
In the Add User dialog, enter the following details:
First Name (Mandatory)
Last Name
Email Id
User Name (Mandatory)
Select Role (Mandatory)
New Password
Confirm Password
Note
Email ID of a user must be unique. No two users can share the same email ID, because the email ID of the second user will appear blank.
Click Save.
Edit or delete user
On the Privacera home page, expand the Settings menu and click on User Management from left menu.
Click Edit (pencil icon) for the user.
Edit the user details.
Note
You are not allowed to change the Username once it is created. Hence, Username and editable.
Click Save.
To delete a user, click the Delete icon next to the user name.
Edit user profiles
On the Privacera home page, click on Username and then click on Profile on top-right.
Edit the profile properties. Profile pop-up displays.
Change the password.
Click Edit next to the Old Password.
Enter the old password.
Enter the new password and confirm it.