Data source table authorization

Add an organization data source

1. In the upper-right corner of the page, choose Organization Management > Data Authorization to open the Data Source Table Authorization page.

2. In the upper-right corner, click New Data Source.

3. In the dialog box that appears, select a data source type and configure its parameters. The procedure is the same as when you configure a workspace data source. For more information, see Data sources (analytical data sources).

After adding an organization data source, grant authorization to a workspace to allow it to use the data for analysis. For more information, see Authorize an organization data source.

Manage data sources

Organization administrators can manage both organization and workspace data sources. A workspace data source is a data source added in a workspace.

On the Data Source Table Authorization page, the list on the left shows organization data sources and the workspace data sources from all workspaces. An icon appears after the name of an organization data source to distinguish it from workspace data sources, as shown in the following figure.

• View details: Click a data source name. A list of data tables from the database appears on the right. Click the icon to view the column information for a table.

• Edit: Click the icon to edit the data source parameters. The editing procedure is the same as when you add a data source. For more information, see Data sources (analytical data sources).

• Remove: Click the icon and confirm the action to remove the data source.

  Note

  You cannot delete the data source if a dataset is based on it. Delete the dataset before you delete the data source.

• Authorize: Click the icon to grant an organization data source to a workspace. For the specific procedure, see Authorize an organization data source below.

Authorize an organization data source

After you grant an organization data source to a workspace, the workspace can use it to create datasets. There are three types of authorization:

• Table permissions: Grant an entire table to a workspace.

• Row permissions: Grant rows from a table to a workspace after filtering them by the values of specified columns. If you specify multiple columns, the granted rows must meet the value requirements for all of them.

• Column permissions: Grant specified columns of a table to a workspace.

The relationships between the three authorization types are as follows:

• If a table is granted to a workspace with both table permissions and row permissions, or with both table permissions and column permissions, the workspace can use the specified rows or columns, but not the entire table.

• If a table is granted to a workspace with both row and column permissions, the workspace has permissions only on the intersection of the specified rows and columns.

• If a workspace has table permissions, and then row or column permissions are enabled for that table, the workspace cannot see any data in the table unless it is also granted the specific row or column permissions.

Grant or revoke table permissions

1. Click the icon, and in the dialog box that appears, select Table Permissions.

2. Select a data table. The workspaces that have permissions for the table and the validity periods are displayed below.

   Note

   • If you select All, the workspace is granted permissions to all data tables in the data source, including tables that are added in the future.

   • If you select multiple data tables, the workspaces that have permissions for all selected tables are displayed below. An empty validity period indicates that the validity periods are different across the tables. Check the validity period for each table individually.

3. Revoke authorization: Click Remove next to a workspace to revoke its authorization. The change takes effect immediately.

4. Grant authorization: Select one or more workspaces, set a validity period, and click OK.

Grant or revoke row permissions

1. Click the icon, and in the dialog box that appears, select Row Permissions.

2. Select a data table and select Enable Row-level Permissions to turn on row-level permissions.

3. Select one or more control columns.

   Note

   • If you select multiple control columns, the granted rows must meet the value requirements for all of them.

   • The selected control columns apply to all workspaces. You cannot set different control columns for different workspaces. If a workspace does not need to be filtered by a specific control column, select All for that column's value in step 6.

   • Adding or removing control columns affects all workspaces immediately. If you remove a control column, its specified values are cleared for all workspaces. If you add a control column, you must set authorized values for it for all workspaces that require row permissions. Otherwise, the column will have no authorized values, and no rows can be retrieved.

   • You cannot select date columns. This means you cannot specify rows to grant based on dates.

4. Select a workspace. On the right, click the icon in front of the control column. A drop-down list shows the authorized values, as shown in the following figure.

5. Revoke authorization: As shown in the figure above, hover the pointer over an authorized value and click the icon on the right to remove it. The change takes effect immediately. When all values are removed, the workspace has no permissions for any rows.

6. Grant authorization: Click a control column. A list on the right shows all values for that column. Select the values to grant and click Add to move them to the list of authorized values. The workspace immediately gains the corresponding row permissions.

   Note

   If you select All and click Add, the workspace is granted permissions for all values of that column, including values added in the future. This means the row permissions for the workspace are not restricted by this column.

Grant or revoke column permissions

1. Click the icon, and in the dialog box that appears, select Column Permissions.

2. Select a data table and select Enable Column-level Permissions to turn on column-level permissions.

3. Select a workspace. The authorized columns are displayed in the middle, and all columns are displayed on the right.

4. Revoke authorization: As shown in the figure above, hover the pointer over an authorized column and click the icon on the right to remove it. The change takes effect immediately.

5. Grant authorization: As shown in the figure above, select the columns to grant from the list on the right and click Add to move them to the list of authorized columns. The workspace immediately gains the corresponding column permissions. If you select All and click Add, the workspace gains permissions for all columns.