Advanced access permission management using shared objects
If setting up access to objects at the workbook and collection level is not enough, you can resort to shared objects. Shared objects are connections and datasets you can reuse and link to several workbooks for different teams.
- How to create a shared object.
- How to add a shared object to a workbook.
- Roles for shared objects.
- Roles for a collection with shared objects.
How to create a shared object
Shared objects are created within a collection.
To create a shared object:
-
Create a collection to store shared objects.
- In the left-hand panel, click
Collections and workbooks. - On the top panel, click Create → Collection.
- Enter a name for the collection.
- Optionally, enter a description of the collection.
- Click Create.
- In the left-hand panel, click
-
Go to the collection you created in the previous step.
-
On the top panel, click Create → Shared objects → Connection.
-
Create the connection using the instructions from the list.
Shared datasets are created based on shared connections.
-
Open the collection storing the shared connection.
- In the left-hand panel, select
Collections and workbooks. - Select a collection with a shared connection from the list and open it.
- In the left-hand panel, select
-
In the top-right corner, click Create → Shared objects → Dataset.
-
Create a dataset by following this guide.
-
Configure rules for delegation of access permissions to the shared connection:
- Delegate access permissions: Access permissions to the shared connection will not be checked within the workbook that will use the shared dataset. This means that anyone with access to the workbook the connection is linked to will also have access to the connection.
- Do not delegate access permissions: For users to access the connection from the workbook the connection is linked to, they must be granted access to the original, i.e., the shared connection.
-
Click Apply.
How to add a shared object to a workbook
Shared objects are linked at the workbook level. In the workbook, they are displayed under Linked objects.
Shared objects can be linked to a workbook by a user with the following permissions:
Adminfor the workbook the shared object will be linked to.AdminorLinks without delegationorLinks with delegationfor a collection of shared objects or directly for the shared objects that will be linked to the workbook.
To link a shared object to a workbook:
-
In the left-hand panel, click
Collections and workbooks. -
Select a workbook to link the shared connection to and open it.
-
On the top panel, click Create → Shared objects → Connection.
-
Select from the list a collection with the shared connection you need, click it, and click the shared connection.
-
Configure rules for delegation of access permissions to the shared connection:
- Delegate access permissions: Access permissions to the shared connection will not be checked within the workbook. This means that anyone with access to the workbook the connection is linked to will also have access to the connection.
- Do not delegate access permissions: For users to access the connection from the workbook, they must be granted access to the original, i.e., the shared connection.
-
Click Apply.
-
In the left-hand panel, click
Collections and workbooks. -
Select a workbook to link the shared dataset to and open it.
-
On the top panel, click Create → Shared objects → Dataset.
-
Select from the list a collection with the shared dataset you need, click it, and click the shared dataset.
-
Configure rules for delegation of access permissions to the shared dataset:
- Delegate access permissions: Access permissions to the shared dataset will not be checked within the workbook. This means that anyone with access to the workbook the connection is linked to will also have access to the dataset.
- Do not delegate access permissions: For users to access the dataset from the workbook, they must be granted access to the original, i.e., the shared dataset.
-
Click Apply.
Roles for shared objects
Limited viewer
The Limited viewer role for a shared object allows you to view charts and dashboards that use the shared object without directly accessing it.
Viewer
The Viewer role for a shared object allows you to view that shared object and the access permissions for it.
Includes permissions granted by the Limited viewer role.
Editor
The Editor role for a shared object allows you to edit it and view access permissions for that object.
Includes permissions granted by the Viewer role.
Admin
The Admin role for a shared object allows you to manage it: edit, move, delete, and configure access permissions for it.
Includes permissions granted by the Editor role.
Links without delegation
The Links without delegation role for a shared object allows you to link it to workbooks without delegating access permissions.
Links with delegation
The Links with delegation role for a shared object allows you to link it to workbooks with or without delegating access permissions.
Roles for a collection with shared objects
Links without delegation
The Links without delegation role for a collection allows you to link shared objects from the collection to workbooks without delegating access permissions.
Links with delegation
The Links with delegation role for a collection allows you to link shared objects from the collection to workbooks with or without delegating access permissions.