Configuring the dataset publisher role
This guide walks through the setup process for the Dataset Publisher role.
In this example, the members assigned to this role possess the ability to grant dataset access to other users, which can be categorized into three levels:
- Grant manage dataset
- Grant manage dashboards
- Grant view dashboards
The granter must have the Grant manage dataset permissions on the target dataset.
In an earlier section, three (3) dataset publishing roles (data admins) in Setting the dataset recipient roles, one each for the three organization groups: Marketing, Sales, and Operations were established. These are Marketing Data Admin, Sales Data Admin, and Operations Data Admin, respectively. The roles for the recipients of the grants, the analysts and the visual consumers were also created.
For more information on possible permissions, see RBAC permissions.
Follow these steps to specify the role Marketing Data Admin:
- In the Roles interface, click either the name of the role, Marketing Data Admin, or the Edit icon on its role.
-
In the Role Detail interface, click ADD ROLES.
The Add Role Privilege modal window appears.
-
From Roles, select Marketing Data Admin, a role defined
previously.
Note that this enables individuals with the Marketing Data Admin role to grant privileges to others with the same role.
-
Click ADD.
- Leave the added privilege with all options on, and click ADD ROLES again to add the next privilege.
- From Roles, select Marketing Analyst, a role defined previously.
- Click ADD.
-
Deselect the Grant manage dataset option for this privilege.
This is because analysts should not be altering the dataset.
- Click ADD ROLES to add the next privilege.
- From Roles, select Marketing Visual Consumer, a role defined previously, then click ADD.
- Unselect the Grant manage dataset and Grant manage dashboards options for this privilege. This is because visual consumers can only view dashboards, and should not be altering the dataset or creating new dashboards. Therefore, this line contains only the Grant view dashboards option.
- Click the Connections tab.
- Click ADD CONNECTIONS to add the next privilege to create the connection-level privileges necessary for the Marketing Data Admin user. This particular privilege enables access to all data available through the specified connection.
- From Connections, select impala.
-
Click ADD.
- Leave this privilege with all options on (Manage AVs/Extracts, Import data, and Create datasets, explore tables).
- Click the Datasets tab.
-
Click ADD DATASETS to add the next privilege.
Finally, you declare dataset-level privileges. You can choose previously declared connections and limit access to a few of its datasets, or select a new connection, or choose all datasets on a connection. Here, you simply let members of the Marketing Data Admin role access all existing datasets on the Impala connection.
- From Connections, select impala.
- From Datasets, select All datasets.
-
Click ADD.
- Leave this privilege with all options on (Manage dataset, Manage dashboards, and View dashboards)
- Click APPLY CHANGES at the bottom of the page to save the new definitions for Marketing Data Admin.
-
Repeat the previous steps to add privileges to the roles of the Sales Data Admin
and Operations Data Admin. Each of these roles should have a privilege matrix that
is similar to privileges assigned to the Marketing Data Admin role.
Table 1. Privileges assigned to the Data Admin roles Role Name Component Permission Marketing Data Admin Role: Marketing Data Admin - Grant manage dataset
- Grant manage dashboards
- Grant view dashboards
Role: Marketing Analyst - Grant manage dashboards
- Grant view dashboards
Role: Marketing Visual Consumer - Grant view dashboards
Connection: Arcadia Enterprise - Manage analytical views
- Import data
- Create datasets, explore tables
Dataset: Arcadia Enterprise, All Datasets - Manage dataset
- Manage dashboards
- View dashboards
Sales Data Admin Role: Sales Data Admin - Grant manage dataset
- Grant manage dashboards
- Grant view dashboards
Role: Sales Analyst - Grant manage dashboards
- Grant view dashboards
Role: Sales Visual Consumer - Grant view dashboards
Connection: Arcadia Enterprise - Manage analytical views
- Import data
- Create datasets, explore tables
Dataset: Arcadia Enterprise, All Datasets - Manage dataset
- Manage dashboards
- View dashboards
Operations Data Admin Role: Operations Data Admin - Grant manage dataset
- Grant manage dashboards
- Grant view dashboards
Role: Operations Analyst - Grant manage dashboards
- Grant view dashboards
Role: Operations Visual Consumer - Grant view dashboards
Connection: Arcadia Enterprise - Manage analytical views
- Import data
- Create datasets, explore tables
Dataset: Arcadia Enterprise, All Datasets - Manage dataset
- Manage dashboards
- View dashboards