C02.01. Разрешения
Версия 37.4 от Ирина Сафонова на 26.06.2023, 12:21
В таблице ниже описаны основные разрешения.
| Admin | Alpha | Gamma | SQL_LAB | ||
| - | - | - | - | - | |
| Разрешение/Описание роли | У пользователей группы доступа Admin есть все возможные права, включая предоставление или отзыв прав у других пользователей и изменение чужих срезов и дашбордов. | Пользователи группы доступа Gamma имеют ограниченный доступ. Они могут использовать только данные, поступающие из источников данных, к которым им предоставлен доступ через другую дополнительную роль. У них есть доступ только для просмотра срезов и дашбордов, созданных из источников данных. При этом у пользователей должен быть доступ к источникам данным.Пользователи Gamma не могут изменять или добавлять источники данных. Они основные пользователи контента, хотя могут создавать срезы и дашборды. | Пользователи группы доступа sql_lab предоставляет доступ к SQL Lab. Обратите внимание, что хотя пользователи с правами администратора по умолчанию имеют доступ ко всем базам данных, пользователям Alpha и Gamma необходимо предоставить доступ для каждой базы данных. | ||
| can read on SavedQuery |  | | : | :heavy_check_mark: | |
| can write on SavedQuery | | | | :heavy_check_mark: | |
| can read on CssTemplate |
| | | O | |
| can write on CssTemplate | | | | O | |
| can read on ReportSchedule | | | | O | |
| can write on ReportSchedule | | | | O | |
| can read on Chart | | | | O | |
| can write on Chart | | | | O | |
| can read on Annotation | | | | O | |
| can write on Annotation | | | | O | |
| can read on Dataset | | | | O | |
| can write on Dataset | | | O | O | |
| can read on Log | | O | O | O | |
| can write on Log | | O | O | O | |
| can read on Dashboard | | | | O | |
| can write on Dashboard | | | | O | |
| can read on Database | | | | | |
| can write on Database | | O | O | O | |
| can read on Query | | | | | |
| can this form get on ResetPasswordView | | O | O | O | |
| can this form post on ResetPasswordView | | O | O | O | |
| can this form get on ResetMyPasswordView | | | | O | |
| can this form post on ResetMyPasswordView | | | | O | |
| can this form get on UserInfoEditView | | | | O | |
| can this form post on UserInfoEditView | | | | O | |
| can show on UserDBModelView | | O | O | O | |
| can edit on UserDBModelView | | O | O | O | |
| can delete on UserDBModelView | | O | O | O | |
| can add on UserDBModelView | | O | O | O | |
| can list on UserDBModelView | | O | O | O | |
| can userinfo on UserDBModelView | | | | O | |
| resetmypassword on UserDBModelView | | | | O | |
| resetpasswords on UserDBModelView | | O | O | O | |
| userinfoedit on UserDBModelView | | O | O | O | |
| can show on RoleModelView | | O | O | O | |
| can edit on RoleModelView | | O | O | O | |
| can delete on RoleModelView | | O | O | O | |
| can add on RoleModelView | | O | O | O | |
| can list on RoleModelView | | O | O | O | |
| copyrole on RoleModelView | | O | O | O | |
| can get on OpenApi | | | | O | |
| can show on SwaggerView | | | | O | |
| can get on MenuApi | | | | O | |
| can list on AsyncEventsRestApi | | | | O | |
| can invalidate on CacheRestApi | | | | O | |
| can function names on Database | | O | O | O | |
| can query form data on Api | | | | O | |
| can query on Api | | | | O | |
| can time range on Api | | | | O | |
| can this form get on CsvToDatabaseView | | | | O | |
| can this form post on CsvToDatabaseView | | | | O | |
| can this form get on ExcelToDatabaseView | | | | O | |
| can this form post on ExcelToDatabaseView | | | | O | |
| can external metadata on Datasource | | | | O | |
| can save on Datasource | | | O | O | |
| can get on Datasource | | | | O | |
| can shortner on R | | | | O | |
| can my queries on SqlLab | | | | | |
| can log on Superset | | | | O | |
| can schemas access for csv upload on Superset | | | | O | |
| can import dashboards on Superset | | | | O | |
| can schemas on Superset | | | | O | |
| can sqllab history on Superset | | | | | |
| can publish on Superset | | | | O | |
| can csv on Superset | | | | | |
| can slice on Superset | | | | O | |
| can sync druid source on Superset | | O | O | O | |
| can explore on Superset | | | | O | |
| can approve on Superset | | O | O | O | |
| can explore json on Superset | | | | O | |
| can fetch datasource metadata on Superset | | | | O | |
| can csrf token on Superset | | | | O | |
| can sqllab on Superset | | | | | |
| can select star on Superset | | | | O | |
| can warm up cache on Superset | | | | O | |
| can sqllab table viz on Superset | | | | | |
| can profile on Superset | | | | O | |
| can available domains on Superset | | | | O | |
| can request access on Superset | | | | O | |
| can dashboard on Superset | | | | O | |
| can post on TableSchemaView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can expanded on TableSchemaView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete on TableSchemaView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can get on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can post on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can delete query on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can migrate query on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can activate on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can delete on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can put on TabStateView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| can read on SecurityRestApi | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| menu access on Security | :heavy_check_mark: | O | O | O | |
| menu access on List Users | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on List Roles | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Action Log | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Manage | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| menu access on Annotation Layers | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on CSS Templates | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| menu access on Import Dashboards | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Data | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Databases | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Datasets | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Upload a CSV | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| menu access on Upload Excel | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Charts | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Dashboards | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on SQL Lab | :heavy_check_mark: | O | O | :heavy_check_mark: | |
| menu access on SQL Editor | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| menu access on Saved Queries | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| menu access on Query Search | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
| all datasource access on all_datasource_access | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| all database access on all_database_access | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| all query access on all_query_access | :heavy_check_mark: | O | O | O | |
| can edit on UserOAuthModelView | :heavy_check_mark: | O | O | O | |
| can list on UserOAuthModelView | :heavy_check_mark: | O | O | O | |
| can show on UserOAuthModelView | :heavy_check_mark: | O | O | O | |
| can userinfo on UserOAuthModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can add on UserOAuthModelView | :heavy_check_mark: | O | O | O | |
| can delete on UserOAuthModelView | :heavy_check_mark: | O | O | O | |
| userinfoedit on UserOAuthModelView | :heavy_check_mark: | O | O | O | |
| can write on DynamicPlugin | :heavy_check_mark: | O | O | O | |
| can edit on DynamicPlugin | :heavy_check_mark: | O | O | O | |
| can list on DynamicPlugin | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can show on DynamicPlugin | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can download on DynamicPlugin | :heavy_check_mark: | O | O | O | |
| can add on DynamicPlugin | :heavy_check_mark: | O | O | O | |
| can delete on DynamicPlugin | :heavy_check_mark: | O | O | O | |
| can edit on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| can list on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| can show on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| can download on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| can add on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| can delete on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| muldelete on RowLevelSecurityFiltersModelView | :heavy_check_mark: | O | O | O | |
| can external metadata by name on Datasource | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can get value on KV | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can store on KV | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can tagged objects on TagView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can suggestions on TagView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can get on TagView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can post on TagView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete on TagView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can edit on DashboardEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can list on DashboardEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can show on DashboardEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can add on DashboardEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete on DashboardEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| muldelete on DashboardEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| can edit on SliceEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can list on SliceEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can show on SliceEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can add on SliceEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete on SliceEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| muldelete on SliceEmailScheduleView | :heavy_check_mark: | :heavy_check_mark: | O | O | |
| can edit on AlertModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can list on AlertModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can show on AlertModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can add on AlertModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete on AlertModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can list on AlertLogModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can show on AlertLogModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can list on AlertObservationModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can show on AlertObservationModelView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Row Level Security | :heavy_check_mark: | O | O | O | |
| menu access on Access requests | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Home | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Plugins | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Dashboard Email Schedules | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Chart Emails | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Alerts | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Alerts & Report | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Scan New Datasources | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can share dashboard on Superset | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can share chart on Superset | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can list on FilterSets | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can add on FilterSets | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete on FilterSets | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can edit on FilterSets | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can this form get on ColumnarToDatabaseView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can this form post on ColumnarToDatabaseView | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| menu access on Upload a Columnar file | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can export on Chart | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can write on DashboardFilterStateRestApi | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can read on DashboardFilterStateRestApi | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can write on DashboardPermalinkRestApi | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can read on DashboardPermalinkRestApi | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can delete embedded on Dashboard | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | O | |
| can set embedded on Dashboard | | O | O | O | |
| can export on Dashboard | | | | O | |
| can get embedded on Dashboard | | | | O | |
| can export on Database | | O | O | O | |
| can export on Dataset | | | O | O | |
| can write on ExploreFormDataRestApi | | | | O | |
| can read on ExploreFormDataRestApi | | | | O | |
| can write on ExplorePermalinkRestApi | | | | O | |
| can read on ExplorePermalinkRestApi | | | | O | |
| can export on ImportExportRestApi | | | | O | |
| can import on ImportExportRestApi | | | | O | |
| can export on SavedQuery | | | | | |
| can dashboard permalink on Superset | | | | O | |
| can grant guest token on SecurityRestApi | | O | O | O | |
| can read on AdvancedDataType | | | | O | |
| can read on EmbeddedDashboard | | | | O | |
| can duplicate on Dataset | | | O | O | |
| can read on Explore | | | | O | |
| can samples on Datasource | | | O | O | |
| can read on AvailableDomains | | | | O | |
| can get or create dataset on Dataset | | | O | O | |
| can get column values on Datasource | | | O | O | |
| can export csv on SQLLab | | O | O | | |
| can get results on SQLLab | | O | O | | |
| can execute sql query on SQLLab | | O | O | | |
| can recent activity on Log | | | | O |