Permission refers to the security rules or security policies set by administrators or resource owners, which allow users to access, view, and use only the resources they are authorized for. Smart Data Insight provides you with hierarchical permission management capabilities. Permission management enables administrators and resource owners to grant permissions on resources, which improves work efficiency and effectively ensures data security. In the Smart Data Insight system, all resources are organized by project, and resources in different projects are isolated from each other. Permission management is responsible for enabling administrators to grant permissions on resources (such as datasets, charts, and dashboards) to these users or user groups. This feature module is accessible only to project administrators.
Permission management is a relatively complex module for an enterprise-level platform. Therefore, we have specially prepared the Permission Guide for your reference. This document only introduces the functional operations of the permission management module in the project center. To learn more about the permission system, please refer to the Permission Guide in the following document:

• Permission system feature introduction: Permission Overview
• Documentation for various feature permissions: Authorization Operations Manual

2.1 Common usage scenarios #

• Permission management: Administrators can efficiently and quickly manage resource authorization for users or user groups, and can perform batch authorization of resources through folders.
• Quickly view user permissions: View the final permissions a user has on resources, and check how the permissions are obtained, making it easier for administrators to conduct quick permission reviews.
• Individually grant permissions to specific users in a user group: By using the [屏蔽组授权] (group authorization exclusion) method, it is possible to individually grant permissions to specific users within a user group. To facilitate authorization and management, a project administrator grants view permissions for 10 dashboards, such as dashboards A, B, and C, to department M. However, there is an intern in department M for whom it is not convenient to view the data of dashboard A. In this case, the administrator can enable the [Block Group Authorization] feature for the intern on dashboard A and revoke the individually granted view permission to address management requirements.

2.2 Usage example #

(1) Click Project Center.
(2) Go to the permission management page.
(3) Search for or directly select the user to be authorized (as shown in the figure above, select the user).
(4) In the resource granting module, switch to the type of resource to be authorized (such as dashboard). The system currently supports five types of resources: project, dashboard, dataset, visual modeling task, and data connection. Note: Data connection is supported in version V2.50.0 and later.
(5) Search for and select the specific resource to be authorized. Click the lock icon under the permission to be granted (such as view/edit). After successful authorization, the lock will change from closed to open.

(6) After successful authorization, the user (for example, yoyo) will have edit permissions for the resource (Dashboard Test (Standard)), can view the data of the dashboard, and can edit the content of the dashboard.

3.1 Select the authorization target #

In the permission management - user list, you can browse or enter such as usernames and other information for fuzzy search to find the specific user to be authorized.

3.2 Select the resource type to authorize #

You can click to switch and select the type of resource to authorize. The system currently supports five types of resources: project, dashboard, dataset, visual modeling task, and data connection.
Note:

• Only public dashboards can be managed for authorization on the permission management page; personal dashboards are not included.
• Data connection is supported in version V2.50.0 and later.

3.3 Search for resources #

You can enter the resource name keyword in the input box and press the Enter key to search for and find the resource to be authorized.

3.4 Description of resource permissions #

Resource permissions include four types: view only, view, edit, and manage. For details on the permission types corresponding to each resource, see Detailed Explanation of Permission Features.

3.5 View specific resource content #

Hover the mouse over the resource name and click to navigate to the resource details page to assist the authorizer in confirming the resource.

3.6 Grant permissions to a single resource #

Select the resource to be authorized, then click the lock icon below the permission to be granted (such as "Edit"). To revoke a granted permission, click the blue lock icon corresponding to that permission.

3.7 Grant permissions to resources in bulk #

Select the folder to be authorized and grant the corresponding permission (such as "Edit"). After the operation is successful, both the folder and all resources it contains are granted this permission (such as "Edit"), and the user will also obtain permissions for resources added to the folder later. Conversely, when the permission is revoked, it is also revoked for all included resources.
Currently, you can manage permissions for individual resources within a folder separately while granting permissions to the folder in bulk. As shown in the following figure:

3.8 Disable group authorization #

After enabling the "disable group authorization" feature, the user's permissions on the resource will no longer inherit permissions from the user group. After disabling this feature, the user's permissions on the resource will inherit permissions from the user group. The user's permissions on the resource are the union of permissions obtained individually and those obtained through the user group.
The following is an example of how to use this feature: To facilitate authorization and management, a project administrator grants view permissions for 10 dashboards (such as dashboards A, B, and C) to department M. However, there is an intern in department M who should not have access to the data of dashboard A. In this case, the administrator can enable the "disable group authorization" feature for the intern on dashboard A and revoke the individually granted view permission, thus achieving the desired effect.