Access Control for Workspace
Workspace roles, operations, access control rules.
Workspace Roles
There are four levels of Workspace-Roles:
Role Name | Description | Summary |
---|---|---|
workspace.Owner | Account who has permissions for managing workspace settings. | Can change workspace settings, invite new members to join workspace. |
workspace.Editor | Account who has permissions for editing several resources. | Can edit notebooks and create connections. Cannot change workspace settings and invite new members. |
workspace.Viewer | Account who has permissions for viewing several resources. | Can browse notebooks. Cannot edit notebooks or create connections. |
workspace.Guest | Account who has permissions just for Reports. | Can browse only shared reports. Guest cannot belong to any groups. |
In Codatum, the terms Owner, Editor, and Viewer are collectively referred to as “Member”. When including the Guest role, the collective term used is “User”. This distinction, while not critical, can be helpful to keep in mind.
Workspace Operations and Access Control Rules
Here we detail the specific actions that can be executed in the workspace and the necessary roles needed to perform them.
Operations | category | Required Workspace-Role Level |
---|---|---|
Invite and remove users. Change user account roles. | user | workspace.Owner |
View audit logs and user activity history. | audit logs | workspace.Owner |
View information about the workspace. | workspace info | workspace.Viewer |
View information of all groups. | group | workspace.Viewer |
Create, delete, and edit groups. Add and remove users to/from groups. | group | workspace.Owner |
Last updated