Entitlements
Understand entitlement-based access controls
Overview
An entitlement is an access control that permits a principal (client or end user) to access a particular application, API operation, or resource. The Intelligent Risk Platform uses entitlements to control access to applications (e.g. Risk Modeler), products (e.g. Data Vault), data (e.g. ESG, Location Intelligence), and models that are restricted by license.
Entitlement management ensures that Intelligent Risk Platform tenants only access the products and services in line with their contract terms. Licensing and entitlement management software provides a platform for these controls, in line with an organization’s authorizations, permissions, privileges, access management, and policies.
Currently, the Intelligent Risk Platform supports the following entitlements: RI-DATAVAULT, RI-EXPOSUREIQ, RI-RISKMODELER, RI-TREATYIQ, and RI-UNDERWRITEIQ.
To access and use API operations that are restricted by entitlement, a client application must belong to a group that has been assigned the appropriate entitlement to perform that operation. Entitlement-based access controls are frequently tied to role-based access controls. For details, see Groups.
RI-DATAVAULT entitlement
RI-DATAVAULT entitlementData Vault is a separately licensed application that enables Intelligent Risk Platform tenants to manage archives of data servers and databases.
Admin Data API operations are generally restricted to principals with the Data Admin role. Operations for managing archives and snapshots require the RI-DATAVAULT entitlement.
| Collection | Operation | Entitlement | Role |
|---|---|---|---|
| Securables | Search Securables | Data Admin | |
| Securables | Get Securable | Data Admin | |
| Securables | Update Securable | Data Admin | |
| Archives | Search Archive | RI-DATAVAULT | Data Admin |
| Archives | Get Archive | RI-DATAVAULT | Data Admin |
| Archives | Create Archive | RI-DATAVAULT | Data Admin |
| Archives | Delete Archive | RI-DATAVAULT | Data Admin |
| Archives | Restore Archive | RI-DATAVAULT | Data Admin |
| Snapshots | Search Database Snapshots | RI-DATAVAULT | Data Admin |
| Snapshots | Get Database Snapshot | RI-DATAVAULT | Data Admin |
| Snapshots | Search Database Snapshots by Server Snapshot | RI-DATAVAULT | Data Admin |
| Snapshots | Get Database Snapshot by Server Snapshot | RI-DATAVAULT | Data Admin |
| Snapshots | Create Archive of Server Snapshot | RI-DATAVAULT | Data Admin |
| Jobs | Search Admin Data Jobs | Data Admin | |
| Jobs | Get Admin Data Job | Data Admin | |
| Jobs | Update Admin Data Job | Data Admin |
RI-EXPOSUREIQ entitlement
RI-EXPOSUREIQ entitlementPrincipals assigned the RI-EXPOSUREIQ entitlement may access operations and data available to licensed ExposureIQ tenants.
Principals with the RI-EXPOSUREIQ entitlement may also access the Data Bridge API.
RI-RISKMODELER entitlement
RI-RISKMODELER entitlementPrincipals assigned the RI-RISKMODELER entitlement may access operations and data available to licensed Risk Modeler tenants.
Principals with the RI-RISKMODELER entitlement may also access the Risk Modeler API and Data Bridge API.
The operations accessible to clients with the RI-RISKMODELER entitlement are generally in the Risk Data API.
RI-TREATYIQ entitlement
RI-TREATYIQ entitlementPrincipals assigned the RI-TREATYIQ entitlement may access operations and data available to licensed TreatyIQ tenants.
RI-UNDERWRITEIQ entitlement
RI-UNDERWRITEIQ entitlementPrincipals assigned the RI-UNDERWRITEIQ entitlement may access operations and data available to licensed TreatyIQ tenants.
Principals with the RI-UNDERWRITEIQ entitlement may also access the Risk Modeler API.
Updated 9 months ago
