Managing Granular Data Access (RBAC)
Use Granular RBAC to control exactly how roles interact with your data. This feature allows you to manage access at the table level and mask sensitive information within specific columns, ensuring high-standard data governance and security control.
Navigating to Access Controls
There are two ways to manage these permissions:
Global Management: Navigate to Admin > Data Access in the main side menu.
Entity-Specific Management: From the Catalog, select any entity and click Manage > Edit Access to adjust permissions for that specific table.
1. Classifying Sensitive Data (Column Constraints)
Before assigning permissions, you should define which columns contain sensitive information.
[!NOTE] Current Scope: Column Constraints can currently only be edited for Blueprints.
Identify Columns: Go to the Column Constraints page. Open the Entities folder and expand an item to view its individual columns.
Set Sensitivity: Mark whether a column contains PII (Personally Identifiable Information) or Financial Data.
Immediate Sync: Changes made here sync immediately across your instance. If a user does not have permission to view these categories, the data in these columns will be masked automatically.
2. Granting Permissions (Access Page)
The Access page is where you define what each Role is allowed to see. You can filter or search for specific Entities (e.g., Finance) or Roles (defined in your Users & Roles section).
Using the Permissions Grid
Permissions are managed via a visual grid. Clicking a cell toggle will change its state:
⚪ Empty Circle: Permission is disabled.
🟡 Filled Circle (with Check Mark): Permission is enabled.
Bulk Actions & Saving
Bulk Edit: Use Select/Deselect All at the folder level to update multiple entities or constraints at once.
Save Your Changes: To commit your updates, click the Check Mark icon located at the top-right of the page.
Key Details to Remember
Data Masking: When access to a Column Constraint (like PII) is restricted, users can still see the table and the column, but the sensitive values within those columns are masked for security.
Need help configuring your security levels? Contact our support team for a guided walkthrough.