System Roles in ML Match and External Match Services

You can manage the ML Match and External Match services through four system roles.

The following System roles provide different rights over the ML Match and External Match services:

  • ROLE_USER_MATCHIQ_PUBLISH_MODEL
  • ROLE_EXTERNAL_MATCH
  • ROLE_USER_MATCHIQ_EXTERNAL_MATCH
  • ROLE_USER_MATCHIQ_TRAIN_MODEL

ROLE_USER_MATCHIQ_PUBLISH_MODEL

This role allows you to publish an approved model and delete a published model, if required.

The following images show the available privileges on resources and sub-resources within the MDM (Reltio Platform service) and ML Match services in the User Management application in Console for the ROLE_USER_MATCHIQ_PUBLISH_MODEL role:

Permissions Matrix for the ROLE_USER_MATCHIQ_PUBLISH_MODEL role

In the Permissions Framework, these same resources, sub-resources, and permissions would translate to the following information:

Table 1. ROLE_USER_MATCHIQ_PUBLISH_MODEL - Details
Service.Resource.Sub-resource ID Label Allowed Privileges Purpose
mdm.config.businessModel Tenant Configurations - Business Model READ/UPDATE Tenant Business Model Configuration including rating, activity, ruleset configurations
mdm.environment.tasks.reindex Tenant tasks - Reindexing EXECUTE GDPR compliance helper task APIs
mdm.environment.tasks.match Tenant tasks - Matching EXECUTE Matching related APIs
mlMatch.model ML Model Flows READ ML Model Flow APIs
mlMatch.model.publish ML Model Flows - Publish Approved Model EXECUTE Publish model APIs
mlMatch.model.create ML Model Flows - Create Model Flow READ/UPDATE Create Model Flow APIs
mlMatch.config Match IQ Config READ Get configuration of Match IQ

ROLE_EXTERNAL_MATCH

The following images shows the available privileges on resources and sub-resources within the MDM (Reltio Platform) service in the User Management application in Console for the ROLE_EXTERNAL_MATCH role:

Permissions Matrix for the ROLE_EXTERNAL_MATCH role

In the Permissions Framework, these same resources, sub-resources, and permissions would translate to the following information:

Table 2. ROLE_EXTERNAL_MATCH - Details
Service.Resource.Sub-resource ID Label Allowed Privileges Purpose
mdm.tasks.periodic Tenant Tasks - Periodic Tasks READ/UPDATE/EXECUTE Managing the Periodic Task APIs

ROLE_USER_MATCHIQ_EXTERNAL_MATCH

The following images shows the available privileges on resources and sub-resources within the Reltio Insights and ML Match services in the User Management application in Console for the ROLE_USER_MATCHIQ_EXTERNAL_MATCH role:

Permissions Matrix for the ROLE_USER_MATCHIQ_EXTERNAL_MATCH role

In the Permissions Framework, these same resources, sub-resources, and permissions would translate to the following information:

Table 3. ROLE_USER_MATCHIQ_EXTERNAL_MATCH - Details
Service.Resource.Sub-resource ID Label Allowed Privileges Purpose
riq.config Reltio Insights - Analytics Configuration READ The complete analytics configuration like AWS keys, business model, lambda/queue configurations
riq.actions.jobs Reltio Insights - Jobs CREATE/READ/DELETE APIs to create custom actions through jobs
mlMatch.externalMatch ML Match Service - ML External Match Flows CREATE/READ/UPDATE/DELETE Administrative access to External Match
mlMatch.model ML Match Service - ML Model Flows READ ML Model Flow APIs
mlMatch.config Match IQ Config READ Get configuration of Match IQ

ROLE_USER_MATCHIQ_TRAIN_MODEL

The following images shows the available privileges on resources and sub-resources within the Active Learning, Reltio Insights, and ML Match services in the User Management application in Console for the ROLE_USER_MATCHIQ_TRAIN_MODEL role:

Permissions Matrix for the ROLE_USER_MATCHIQ_TRAIN_MODEL role

In the Permissions Framework, these same resources, sub-resources, and permissions would translate to the following information:

Table 4. ROLE_USER_MATCHIQ_TRAIN_MODEL - Details
Service.Resource.Sub-resource ID Label Allowed Privileges Purpose
activeLearning.session Active Learning Service - AL Training Session CREATE/READ/UPDATE/DELETE AL Model Training APIs
activeLearning.prediction Active Learning Service - Prediction CREATE/READ/UPDATE/DELETE Prediction APIs
activeLearning.model Active Learning Service - Creating Final Model CREATE/READ/DELETE Final Model APIs
riq.config Reltio Insights - Analytics Configuration READ The complete analytics configuration like AWS keys, business model, lambda/queue configurations
riq.actions.jobs Reltio Insights - Jobs CREATE/READ/DELETE APIs to create custom actions through jobs
mlMatch.model.approve ML Match Service - Approve Trained Models EXECUTE Approve Trained Model APIs
mlMatch.model.flow ML Match Service - Create Model Flow CREATE/READ/UPDATE/DELETE ML Model Flow APIs
mlMatch.model.train ML Match Service - Train Models CREATE/READ/UPDATE ML Model Flow APIs
mlMatch.config Match IQ Config READ Get configuration of Match IQ