Managing access to a catalog

If you have the Admin role in the catalog, you can manage access to the catalog on the Access control page. You add collaborators with specific roles that determine their permissions to perform actions.

Add collaborators

Catalog collaborators must meet these requirements:

  • They must be Watson Knowledge Catalog users. They can sign up for individual Watson Knowledge Catalog Lite accounts, or they can specify a shared IBM Cloud account when they sign up for Watson Knowledge Catalog.
  • They must be users in the IBM Cloud account that provisioned the Watson Knowledge Catalog service and created the catalog. You can manually add users to your IBM Cloud account, or, include all users in your company by setting up SAML federation on IBM Cloud.

Catalog collaborators can access all their catalogs regardless of whether they log in to Watson Knowledge Catalog through their own or a shared account.

You can add multiple collaborators with the same role in a single operation.

To add one or more collaborators to a catalog:

  1. On the Access control page, click Add Collaborator.
    • Enter the user’s name or IBMid in the Collaborators field and then select the user in the search results. You can copy multiple IBMid email addresses, separated by spaces, and paste them into the Collaborators field.
    • Enter the email address of new users and choose a role. New users receive email invitations to collaborate in the catalog.
      If an invited user does not have an IBM Cloud account, the user receives an email invitation to create an IBM Cloud account and activate Watson Knowledge Catalog. When the user activates Watson Knowledge Catalog, the user can see your catalog and the user’s status on your collaborators list changes from Invited to Active. If necessary, you can resend or cancel an invitation.
  2. Specify the role for all users:
    • Viewer: can only look at the catalog
    • Editor: can use, add, and control access to assets.
    • Admin: has full control of the catalog.
      See Catalog collaborator permissions.
  3. Click Add.

Add access groups

You can add an IBM Cloud access group to a catalog. All the members of the access group become catalog collaborators with the role that you assign to the access group. If a user is added both as an individual collaborator and in an access group, the user has the role with more permissions.

The user names of access group members aren’t visible on the Access Control page and don’t appear in searches. However, user names of access groups members are visible when they add, edit, or review assets.

Access group members can’t be added as members of assets. They can only be asset owners.

To add access group members as collaborators to a catalog:

  1. Choose Manage > Account > Users to go to your IBM Cloud account.
  2. If the users are not already in your IBM Cloud account, add them to your IBM Cloud account.
  3. Set up an access group and add members to it.
  4. Back in your catalog, go to the Access control page and click Add Access Group.
  5. Enter the access group name in the Groups field and then select the access group in the search results. You can copy multiple access group names, separated by spaces, and paste them into the Groups field.
  6. Specify the role for all members of the access groups:
    • Viewer: can only look at the catalog
    • Editor: can use, add, and control access to assets.
    • Admin: has full control of the catalog.
      See Catalog collaborator permissions.
  7. Click Add.

Change collaboration roles

You change the role of a collaborator or access group on the Access Control page.

You can change the role of multiple collaborators or access groups simultaneously by selecting multiple users or groups and choosing a role.

Delete collaborators or access groups

You delete collaborators or access groups by selecting one or more users or groups on the Access control page and clicking the trash icon.