Access Control for Notebook

Notebook access scopes, roles, operations, access control rules.

Access Scopes for Notebook

The access control for notebooks vary depending on the (root) folder of the notebook. There are four types of access scopes for notebooks:

Scope	Description
Workspace	All users in the workspace can access
Teamspace	Users in the teamspace can access
Private	Only the owner can access
Shared	Users and groups who have been granted by additional permissions can access

Resource Roles for Notebooks

The following roles determine the operations users can perform on notebooks.

Role Name	Summary
Notebook Editor	Can edit notebooks
Notebook Viewer	Can view notebooks

Notebook Operations and Access Control Rules

Below are the operations that can be performed with notebooks and the corresponding roles required for each scope.

Executing SQL written in a Notebook and retrieving its results are determined by the access rights on the Connection, regardless of the access right on the Notebook itself. Therefore, please refer to the Access Control for Connection.

The access rights to notebooks in a teamspace are determined by the access rights granted in the teamspace. For more details, please refer to Access Control for Teamspace.

Operations	scope: Workspace	scope: Teamspace	scope: Private	scope: Shared
View contents Comment	Workspace Viewer	"Workspace Viewer" AND "Teamspace Viewer"	Workspace Editor	"Workspace Viewer" AND "Notebook Viewer"
Edit notebooks (exclude running SQL).	Workspace Editor	"Workspace Editor" AND "Teamspace Editor"	Workspace Editor	"Workspace Editor" AND "Notebook Editor"
Create, move, delete notebooks Manage folders	Workspace Editor	"Workspace Editor" AND "Teamspace Editor"	Workspace Editor	N/A
Share directly with specific users or groups.	N/A	"Workspace Viewer" AND "Teamspace Editor"	Workspace Editor	N/A