Entitlements

Understand entitlement-based access controls

Overview

An entitlement is an access control that permits a principal (client or end user) to access a particular application, API operation, or resource. The Intelligent Risk Platform uses entitlements to control access to applications (e.g. Risk Modeler), products (e.g. Data Vault), data (e.g. ESG, Location Intelligence), and models that are restricted by license.

Entitlement management ensures that Intelligent Risk Platform tenants only access the products and services in line with their contract terms. Licensing and entitlement management software provides a platform for these controls, in line with an organization’s authorizations, permissions, privileges, access management, and policies.

Currently, the Intelligent Risk Platform supports the following entitlements: RI-DATAVAULT, RI-EXPOSUREIQ, RI-RISKMODELER, RI-TREATYIQ, and RI-UNDERWRITEIQ.

To access and use API operations that are restricted by entitlement, a client application must belong to a group that has been assigned the appropriate entitlement to perform that operation. Entitlement-based access controls are frequently tied to role-based access controls. For details, see Groups.

RI-DATAVAULT entitlement

Data Vault is a separately licensed application that enables Intelligent Risk Platform tenants to manage archives of data servers and databases.

Admin Data API operations are generally restricted to principals with the Data Admin role. Operations for managing archives and snapshots require the RI-DATAVAULT entitlement.

CollectionOperationEntitlementRole
SecurablesSearch SecurablesData Admin
SecurablesGet SecurableData Admin
SecurablesUpdate SecurableData Admin
ArchivesSearch ArchiveRI-DATAVAULTData Admin
ArchivesGet ArchiveRI-DATAVAULTData Admin
ArchivesCreate ArchiveRI-DATAVAULTData Admin
ArchivesDelete ArchiveRI-DATAVAULTData Admin
ArchivesRestore ArchiveRI-DATAVAULTData Admin
SnapshotsSearch Database SnapshotsRI-DATAVAULTData Admin
SnapshotsGet Database SnapshotRI-DATAVAULTData Admin
SnapshotsSearch Database Snapshots by Server SnapshotRI-DATAVAULTData Admin
SnapshotsGet Database Snapshot by Server SnapshotRI-DATAVAULTData Admin
SnapshotsCreate Archive of Server SnapshotRI-DATAVAULTData Admin
JobsSearch Admin Data JobsData Admin
JobsGet Admin Data JobData Admin
JobsUpdate Admin Data JobData Admin

RI-EXPOSUREIQ entitlement

Principals assigned the RI-EXPOSUREIQ entitlement may access operations and data available to licensed ExposureIQ tenants.

Principals with the RI-EXPOSUREIQ entitlement may also access the Data Bridge API.

RI-RISKMODELER entitlement

Principals assigned the RI-RISKMODELER entitlement may access operations and data available to licensed Risk Modeler tenants.

Principals with the RI-RISKMODELER entitlement may also access the Risk Modeler API and Data Bridge API.

The operations accessible to clients with the RI-RISKMODELER entitlement are generally in the Risk Data API.

RI-TREATYIQ entitlement

Principals assigned the RI-TREATYIQ entitlement may access operations and data available to licensed TreatyIQ tenants.

RI-UNDERWRITEIQ entitlement

Principals assigned the RI-UNDERWRITEIQ entitlement may access operations and data available to licensed TreatyIQ tenants.

Principals with the RI-UNDERWRITEIQ entitlement may also access the Risk Modeler API.