Access Control for Connection
Connection roles, operations, access control rules.
Access Levels for Connections
The access control for connections vary depending on the access level. There are three types of access levels for connections:
Scope | Description |
---|---|
Workspace | All users can access workspace connections. |
Protected | Only granted users can access protected connections. Workspace owners can edit permissions. |
Private | Only granted users can access protected connections. Workspace owners cannot edit permissions. |
Roles for Connections
The following roles determine what operations users can perform on connections.
Role Name | Summary |
---|---|
connection.Owner | Can edit and delete connections, and change sharing settings. |
connection.User | Can execute queries and view query results and tables. Can publish reports associated with the connection. |
connection.Viewer | Can view query results and tables |
Connection Operations and Access Control Rules
Here are the operations that can be performed on connections and the roles required for each level.
Operations | level: Workspace | level: Protected | level: Private |
---|---|---|---|
Create a connection. | workspace.Editor | workspace.Editor | workspace.Editor |
View a list of connection names. | workspace.Viewer | workspace.Viewer | workspace.Editor AND connection.Viewer |
Edit and delete a connection. | workspace.Owner OR connection.Owner | workspace.Owner OR (workspace.Viewer AND connection.Owner) | workspace.Editor AND connection.Owner |
Change permission settings of a connection. | N/A | workspace.Owner OR (workspace.Viewer AND connection.Owner) | workspace.Editor AND connection.Owner |
Execute any SQL codes. | workspace.Editor | workspace.Viewer AND connection.User | workspace.Editor AND connection.User |
Get sql job results and table informations. | workspace.Viewer | workspace.Viewer and connection.Viewer | workspace.Editor AND connection.Viewer |
Last updated