ETL Management Roles

Overview

ETL Management has a default list of effective roles that are granular and grant access to view and change specific configurations. Default effective roles cannot be removed or modified, but users are given the possibility to create their own custom realm roles and assign default effective roles to them.

Default Composite Application Role

All default ETL Management roles are grouped under the ETL Managementapplication.

The list of predefined composite roles and their descriptions includes:

ETL_ADMIN – the user who is responsible for setting up the integrations using ETL Management. This composite role contains all the effective roles listed below.

The eleveo.admin user has all ETL Management roles assigned by default.

Default Effective Application Roles

The following table contains a detailed list of effective roles and their descriptions. Both default Eleveo users eleveo.admin and eleveotrain have ETL Management roles assigned.

If the server is deployed in Amazon Elastic Kubernetes Service (EKS), then eleveo.admin user has no ETL Management roles assigned by default.

Some of the roles are utilized by the system (ETL jobs) when making requests to the ETL REST APIs. These roles are marked with the SERVICE ROLE ONLYlabel.

Role	Action allowed
`CREATE_CONFIGURATION`	Create a new configuration (integration in ETL Management).
`DELETE_CONFIGURATION`	Delete an existing configuration.
`UPDATE_CONFIGURATION`	Update existing configuration.
`ETL_MANAGER_LAUNCH_TASK`	Deprecated in version 8.2, (replaced by the `LAUNCH_TASK` role)
`ETL_MANAGER_GET_EVENTS`	Deprecated (replaced by the `GET_EVENTS` role)
`GET_CONFIGURATION`	Get/load existing configurations.
`GET_TOKEN`	SERVICE ROLE ONLY Used by internal processes to get authorization token for third party REST APIs, for example Webex, Zoom, MS Teams
`GET_EVENTS`	SERVICE ROLE ONLY Used by internal processes to get events related to tasks executions (time of execution, result…)
`GET_ROLES_KEYCLOAK`	Get custom roles from User Management (action allowed for a task created by a user).
`GET_ROLES_WEBEXCC`	Get Webex Contact Center roles (action allowed for a task created by a user).
`GET_ROLES_ZOOMCC`	Get Zoom Contact Center roles (action allowed for a task created by a user).
`GET_ROLES_MSTEAMS`	Get MS Teams roles (action allowed for a task created by a user).
`GET_VARIABLE`	SERVICE ROLE ONLY Get variables of the existing configuration (action allowed for a task created by a user).
`SAVE_VARIABLE`	SERVICE ROLE ONLY Save variables of the existing configuration (action allowed for a task created by a user).
`LAUNCH_TASK`	Launch a task manually.
`GET_STREAM_CONFIGURATION_WEBEXCC`	Deprecated