Users and access rights management

Does DataLens support login via SSO?Does DataLens support login via SSO?

In Yandex DataLens, you can configure authentication using SSO or identity federation, if you have one. DataLens users can get authenticated using their corporate accounts.

Starting January, 2025, SSO authentication in Yandex DataLens will be available only for the Business service plan.

To avoid authentication issues, Community users that use SSO have until January 29, 2025 to decide whether

• to switch to Business and continue using SSO
• or switch to authentication with a Yandex account that you need to add to your organization. You can finalize this in DataLens or in Yandex Cloud Organization.

How do I add a user and send them a link to the dashboard?How do I add a user and send them a link to the dashboard?

To allow another user to open your dashboard, configure access to Yandex DataLens:

1. Invite a user with a Yandex account or add a federated user.

2. Make sure the user has access permissions to the dashboard:

   1. Open the dashboard.

   2. In the Add member field, enter All or the name of the user who needs extended permissions.

   3. Go to the Current object section and set the permissions for the dashboard:

      • View: Read only is available.
      • Edit: View and edit options are available.
      • Administration: View, edit, and manage options are available.

   4. Enable the Linked objects option to grant permissions to other dashboard-related objects, such as connections, dashboards, and charts.

The user is granted access to your DataLens and objects with All permissions. You can assign this user individual permissions to objects.

You can send the link to the dashboard from the browser. For more information about permissions to DataLens objects, see the documentation.

You can also make your dashboard public using Public access.

Why does a permission error occur?Why does a permission error occur?

Check that the user has been granted rights:

• To the DataLens datalens.instances.user or datalens.instances.admin instance.
• To the dashboard and all related objects (connection, chart, and dataset):
  • To view the dashboard and related charts.
  • To execute all datasets and connections associated with the dashboard.

By setting up dashboard permissions you can assign permissions to all related objects.

To assign permissions to all of your users, use the All group. For federated users, you can grant access only to the All group.

For more information about permissions to DataLens objects, see the documentation.

What permissions does an object copied to a directory get?What permissions does an object copied to a directory get?

If you copy an object to a directory, it gets the same permission settings as the directory has. For more information about rights settings, see the documentation.

How do I revoke a Yandex account access token?How do I revoke a Yandex account access token?

Access to account data can be disabled at any time by revoking a token issued in Yandex ID:

1. Open Yandex ID.
2. Go to Logins and devices → Devices, services, and applications.
3. Under Other applications and services, select DataLens.
4. Click Delete.

Once a token is revoked, any connections using it will stop working (see error Invalid user token).