Permissions are changed by configuring roles (see How to create roles)

Go to the role and press Configure

image-20210213095520694

Select the Perms tab

image-20210213095700274

Add Permission

To add a permission, press Add Perm and select the permission that you want to give to the role.

image-20210213095955426

A short description of the permission is visible upon hovering the mouse over the permission in the role list.

image-20210213100225082

Description of permissions

Code Title Description Object-specific? Is Mart Specific
PIPELINE_MANAGE Manage pipelines Create/Edit/Delete Pipelines and their Origins   True
LOAD_ORIGIN Load data using Origin Use given origin to upload/import data by creating a batch. Excludes structure batches. Origin True
DATA_VIEW View Data Be able to see the data (rows) of a given Catalog View Table or view True
MART_MANAGE Manage mart Edit/soft delete the current Mart. Manage mart permissions   True
MODEL_UPDATE Update model Update a marts model via structure batch   True
CATALOG_MANAGE Manage Data Catalog Create, delete, and edit catalog categories. This also includes adding/removing existing tags to catalog views.   True
DB_CONNECTION_MANAGE Manage DB Connections Create/edit/delete database connections.   True
USER_MANAGE User Manage Allows an end-user to add or remove users from one or more roles Role True
PIPELINE_VIEW Pipeline View Allows access to pipeline page   True
MART_CREATE Create a mart Create marts. Note, does not give rights to manage the current mart!   False
TAG_MANAGE Manage Tags for all marts Create/edit/delete Tags. Note, tags are shared across all marts.   False
DATA_BROWSE Browse Xmart Data Catalog Discover tables and views for top-level catalog, this permission should be in every role by default.   False

Remove Permission

To remove a permission, press the delete icon in the list of permissions:

image-20210213095828897

Define object-specific permissions

The LOAD_ORIGIN, DATA_VIEW and USER_MANAGE permissions can be refined by applying to specific objects.

After selecting one of these permissions in the Add Perm window, activate the “Only applies to ….” setting and choose the specific objects you want to allow.

image-20210213101315870