Home
Administrator Guides
Administrator Guide
Administrator Guide
Security management
Unica Platform supports roles and permissions to control user access to objects and features in Unica applications.
Cross-partition administration privileges
In a multi-partition environment, at least one user account with the PlatformAdminRole role in Unica Platform is required, to enable you to administer security for Unica users across all partitions.

Administrator Guides
- Administrator Guide
  - Administrator Guide
    - Unica Platform features
      Unica Platform provides security, configuration, notification, and dashboard features for Unica products.
    - Licensing - overview
    - HCL Unica user account management
      You can manage the attributes of user accounts created using Unica Platform user interface, which we refer to as internal accounts. This is in contrast to external user accounts, which are imported from an external system such as an LDAP server or web access control system.
    - Security management
      Unica Platform supports roles and permissions to control user access to objects and features in Unica applications.
      - Permissions and tasks of the security administrator in Unica Platform
        Only users with either the AdminRole or PlatformAdminRole role in Unica Platform have access to security administration features for user accounts other than their own.
      - Special characters in role and policy names
        You may use only the following characters when you create role and policy names.
      - Roles and permissions in Unica Platform and Unica Campaign
        Roles in Unica Platform and Unica Campaign are a configurable collection of permissions. For each role in Unica Platform and Unica Campaign, you can specify permissions that control access to the application.
      - Overview of managing user application access in Unica Platform
        Using Unica Platform security administration features to manage user application access is a multi-step process. The following procedure provides an overview of the basic process, which is described in detail in the remainder of this guide.
      - Types of groups: internal and external
        When Unica is integrated with an external server (such as a supported LDAP server or a web access control system), it supports two types of groups: internal and external.
      - Partitions and security management
        Partitions in Unica Campaign and related products provide a way to secure the data associated with different groups of users. With partitioning, a user's partition appears as if it were a separate running instance of Unica Campaign, with no indication that other partitions are running on the same system. This section describes special security management considerations in a multi-partition environment.
      - Pre-configured users and roles
        When Unica is first installed, three users are pre-configured and are assigned system-defined roles in Unica Platform and Unica Campaign, as described in this section.
      - Cross-partition administration privileges
        In a multi-partition environment, at least one user account with the PlatformAdminRole role in Unica Platform is required, to enable you to administer security for Unica users across all partitions.
      - Adding an internal group
        Use this procedure to add an internal group.
      - Adding a subgroup
        Use this procedure to add an internal subgroup.
      - Deleting a group or subgroup
        Remember, when you delete a group or subgroup, members of the group lose the roles assigned to that group, and any parents of that group also lose those role assignments, unless the roles are also explicitly assigned to the parents.
      - Changing a group or subgroup description
        Use this procedure to change a group or subgroup description.
      - Assigning a group to a partition
        This procedure is necessary only if multiple partitions are configured for Unica Campaign. Only an account with the PlatformAdminRole role, such as the platform_admin user, can perform this task.
      - Adding a user to a group or subgroup
        Use this procedure to add a user to a group or subgroup.
      - Removing a user from a group or subgroup
        Use this procedure to remove a user from a group or subgroup.
      - The user group management pages
        These are the fields you use to configure user groups.
      - Creating a role
        You should create new roles only for products that have detailed permissions. The reporting function and some Unica products have only basic permissions available, so there is no need to create additional roles for these products.
      - Modifying role permissions
        Use this procedure to modify role permissions.
      - Removing a role from the system
        Use this procedure to remove a role from Unica.
      - Assigning a role to or removing a role from a group
        If you add a role to a group or remove a role from a group, members of that group acquire or lose that role.
      - Assigning a role to or removing a role from a user
        Use the Edit roles window to assign a role to or to remove a role from a user.
      - Definitions of permission states'
        For each role, you can specify which permissions are granted, not granted, or denied. You set these permissions on the Settings > User roles and permissions page.
      - Permissions for products that use only basic roles
        The following table describes the functional definitions of the roles available for the Unica products that use only the basic roles. See the product documentation for additional information.
      - Permissions for Unica Platform
        The following table describes the permissions you can assign to roles in Unica Platform.
      - Permissions for Opportunity Detect
        The following table describes permissions that you can assign to roles in Opportunity Detect.
    - Configuration management
      When Unica is first installed, the Configuration page shows only the properties used to configure Unica Platform and some global configuration properties. When you install additional Unica applications, the properties used to configure these applications are registered with Unica Platform. These properties are then shown on the Configuration page, where you can set or modify their values.
    - Dashboard management
      Dashboards are configurable pages that contain information useful to groups of users who fill various roles within your company. The components that make up dashboards are called portlets. Dashboards can contain pre-defined portlets or portlets that you create.
    - The HCL Unica Scheduler
      The Unica Scheduler enables you to configure a process to run at intervals that you define.
    - SAML 2.0 based federated authentication
      Unica Platform implements a SAML 2.0 based Identity Provider (IdP) that enables a single sign-on federation among Unica products or between Unica products and third party applications.
    - SAML 2.0 single sign-on
      Unica Platform supports SAML 2.0 based single sign-on.
    - Single sign-on between HCL Unica and IBM Digital Analytics
      If your organization uses IBM Digital Analytics, you can enable single sign-on between Digital Analytics and Unica.
    - Integration between HCL Unica and Windows Active Directory
      Unica Platform can be configured to integrate with Windows™ Active Directory server or another LDAP (Lightweight Directory Access Protocol) server. By integrating Unica with a directory server, you can maintain users and groups in one centralized location. Integration provides a flexible model for extending the enterprise authorization policies into Unica applications. Integration reduces support costs and the time needed to deploy an application in production.
    - Integration between HCL Unica and LDAP servers
      Unica Platform can be configured to integrate with Windows™ Active Directory server or another LDAP (Lightweight Directory Access Protocol) server. By integrating Unica with a directory server, you can maintain users and groups in one centralized location. Integration provides a flexible model for extending the enterprise authorization policies into Unica applications. Integration reduces support costs and the time needed to deploy an application in production.
    - Integration with web access control platforms
      Organizations use web access control platforms to consolidate their security systems, which provide a portal that regulates user access to web sites. This section provides an overview of Unica integration with web access control platforms.
    - Alert and notification management
      Unica Platform provides support for system alerts and user notifications sent by Unica products.
    - Implementation of one-way SSL
      This section describes one-way SSL in Unica.
    - Security framework for HCL Unica APIs
      Unica Platform provides the security framework for the APIs implemented by Unica products.
    - Data filter creation and management
      Data filters make it possible to restrict the customer data that an Unica user can view and work with in Unica applications. You can think of the data you secure with a data filter as a data set defined by the fields in your customer tables that you specify.
    - Audit event tracking in HCL Unica
      You can configure which audit events are tracked and assign a severity level to each tracked event.
    - The Unica Platform system log
      You should check the system log first if the Unica Platform application malfunctions. The system log is independent of the security audit information, which is stored in the system tables. While the system log tracks some of the same information contained in the security audit reports, it also contains information useful in troubleshooting Unica Platform.
    - Unica Platform utilities
      This section provides an overview of the Unica Platform utilities, including some details that apply to all the utilities and which are not included in the individual utility descriptions.
    - Unica Platform SQL scripts
      This section describes the SQL scripts provided with Unica Platform to perform various tasks relating to the Unica Platform system tables.
    - HCL Unica configuration properties
      This section describes the configuration properties found on the Settings & Configuration page.
    - Customization of stylesheets and images in the HCL Unica user interface
      You can customize the appearance of the user interface where most Unica product pages appear. By editing a cascading style sheet and providing your own graphics, you can change many of the images, fonts, and colors in the user interface.
- Configuration Properties Guide
- System Tables

Cross-partition administration privileges

In a multi-partition environment, at least one user account with the PlatformAdminRole role in Unica Platform is required, to enable you to administer security for Unica users across all partitions.

The platform_admin account is pre-configured with the PlatformAdminRole role. The platform_admin account is a superuser account that cannot be deleted or disabled through the Users functions in Unica. However, this account is subject to the password constraints of any other user. For example, someone attempting to log in as platform_admin might enter an incorrect password N times in a row. Depending on the password rules in effect, the platform_admin account might be disabled in the system. To restore this account, you must take one of the following actions.

If you have another user with the PlatformAdminRole role in Unica Platform, log in as that user and reset the platform_admin user's password or create another account with the PlatformAdminRole role in Unica Platform.
If you have only one user with the PlatformAdminRole role in Unica Platform (for example, platform_admin), and this user is disabled, you can create a new platform_admin account using the restoreAccess utility provided with Unica Platform.

To avoid a situation where you must restore PlatformAdminRole access using the restoreAccess utility, it is a good practice to create more than one account with PlatformAdminRole privileges.

Have feedback?
Google Analytics is used to store comments and ratings. To provide a comment or rating for a topic, click Accept All Cookies or Allow All in Cookie Preferences in the footer of this page.