Understanding Data Set Security

The Application Data Set (ADS) framework allows users to:

Define the shape of business objects as data set definitions.
Define the contents of a data migration project.
Copy or compare the data migration projects to and from files.

Data sets may contain sensitive data, therefore it is critical to define security for data set functions and services. Security for data sets includes security to:

Create data sets and ADS projects.
Copy ADS projects to file.
Compare ADS projects from file.
View compare reports.
Copy ADS projects from file.
Encrypt data set project files.
Modify PeopleTools owned data sets.

Important! PeopleTools owned data set are delivered as read-only and should not be modified. Any modifications necessary will be delivered in an update available from PUM.

This table provides a summary of the security used with ADS.

Access To	Set In	Details
ADS pages	User profile See Assigning Data Set Permissions to Users	ADS Designer role
Access Group permission to the access groups that contain the records in the data sets.	Permission List - Data Migration page - Access Group Permission link. See Defining Access Group Permissions	The access groups are used to determine which records the user has access to in Data Migration Workbench.
Copy Compare Report permissions	Permission List - Data Migration page - Copy Compare Report link. See Defining Copy Compare Report Permission	Grant access to copy and compare data migration projects. Grant access to edit and run reports on data sets.
Upgrade	Permission List - PeopleTools page - Application Designer link See Setting Upgrade Permissions	Grant Full Access to Upgrade. Full access to upgrade allows the user to copy any record without checking the specific authority to that record.
PeopleTools Data Access	Permission List - PeopleTools page See Setting PeopleTools Data Access	Select PeopleTools Data Access to grant access to modify PeopleTools owned data sets.
File Repository	System Administrator creates a directory. See Managing ADS Project File Locations	The project repository location must be accessible in order to load, copy and compare data migration projects.