Creating and Managing Groups (and Securing Data Sources)
The Zoomdata client provides administrators the account management controls to create groups and manage users’ access to the data sources connected to Zoomdata.
To assign same access rights to specific data sources to a number of users, administrators can add them to a group. Members are added from the Groups option > Members tab (as shown in Figure 1).
Administrators have the following capabilities in the management of groups:
- Create new groups
- Edit and delete existing groups
- Select data sources that a group can access
- Guardrail data sources so that a group can access only certain attributes, metrics or rows (using the Forced Filters feature)
- Add and remove users from groups
Step-by-step instructions for each of these capabilities are provided below. Before the steps are detailed, the next section explains how administrators can manage access privileges to data sources in Zoomdata.
THE GROUPS ONLY ROLE
Users who are assigned to a group can have different access and editing rights depending on the parameters that are enabled at the group level. Administrators can grant privileges to perform actions (for example, save filters, create new data sources, and so on) and provide or deny access to the data sources.
Use the Privileges page to enable users to perform custom actions:
|Select the option||To enable the group to|
By default, these options are enabled for the group.
The administrator may assign one or more of these settings for the group.
MANAGING DATA SOURCES ACCESS RIGHTS
Use the Data Sources page to manage the access rights of the user group to the data sources.
The Group has access to all data source(s) option allows administrators to make changes to existing data sources (such as changing the source name, customizing labels for Field IDs, changing the JDBC or Zookeeper URL connection, and editing the chart capabilities) as well as disabling, enabling, or deleting the connection to the data source.
The Manual Configuration option lets administrators manage group access to individual data sources. This option provides a level of security for an organization by managing access privileges within Zoomdata at the data source level.
Administrators can assign one or more data sources to a group. In addition, a data source may have multiple groups with access rights to it:
- There is no limitation as to the number of groups that may be assigned to a data source
- There is no limitation as to the number of data sources that may be assigned to a group
For example, (see Figure 5) the Finance Group is provided access to three different data source: sales data in Hadoop , finance data in Oracle , and customer reviews in Solr .
After adding data sources, the administrator can set the access level for the group. There are three levels of access that can be assigned to each data source (as detailed in the table below):
|Data source||Read||Ability to view existing data sources that have been created in Zoomdata.|
|Edit||Access privileges include ability to edit and make changes to the existing data sources (such as changing the source name, customizing labels for field IDs, changing JDBC or Zookeeper URL connection, and editing the chart capabilities) as well as disabling and enabling the connection to a data source|
|Delete||Ability to delete a data source|
Choosing to manually configure data sources also lets you manage them to a greater level of granularity - by filtering access at the attributes and metrics level. As a result, an administrator can grant a group access to only certain rows of data within a data source - the remaining data would be inaccessible (Force Filter).
For example, if one data source contains information about sales from different regions, each dataset may be filtered to be accessible by specific groups. In this example, each regional sales group is given access to only their specific regional sales dataset (see Figure 6).
As with the case of data sources, there is no limitation as to the number of filters that can be created for a group. A filter may be created for each unique data source that is assigned to a group.
To apply force filters, click Add Filter on the Data Sources page.
The Forced Filters dialog box contains two tabs: New Filter and Saved Filters . These two tabs are described below:
- New Filter - Limit access to the data source by the created filter. The group will be able to access only allowed in the filter fields from the data source.
- Saved Filters - Provide access to the filters that have been saved by other users. The group will be able to access only allowed in the saved filters fields from the data source.
Zoomdata provides the the flexibility to set up a group with a combination of different access privileges to data sources. These options are available both on the Data Sources and Privileges tab, and can be mixed and matched as needed to provide a group with the appropriate level of access. The administrator may want to plan out the groups that are needed in Zoomdata to help determine the most appropriate combination of access that is needed for each. Example scenarios of group access options include:
- Allowing a group the ability to create new data sources, view all existing data sources, and edit a specific data source.
- Allowing a group the ability to view all existing data sources and editing rights to selected, filtered data sources.
To begin the process of setting up users in Zoomdata, log in as an administrator.
Click Settings and then click Users & Groups .
Click Groups .
Step-by-step instructions are provided below for creating new groups, adding members to a group, and managing data sources.
CREATING A GROUP
Click New Group .
- On the New Group page, specify a name for the group. You can also enter a description for the group.
- Click Save . After you have saved the group, you can proceed to select the data sources that the group will have access to, add the users, and assign privileges for this group.
ADDING MEMBERS (USERS) TO A GROUP
- Click Add Member(s) .
Use search bar to easily locate a specific user when there is a large number of users in Zoomdata. You can add additional users or delete users from a group at any time.
Click Save . A save confirmation message will display.
SELECTING DATA SOURCES FOR A GROUP
As discussed earlier in this article, the administrator manages the access rights of a group to data sources.
You can grant the required privileges to a user group:
- Can Create New DataSources
- Can Save Charts & Dashboards
- Can Share Chatrs & Dashboards Externally
- Can Save Filters
- Can Read Calculations
- Can Edit Calculations
Select the corresponding checkboxes.
To grant access to all data sources to a user group, on the Data Sources tab, select the Group has access to all data source(s) option.
To assign specific data sources only to a group or limit the group to view or access only certain attributes or metrics using the Forced Filters functionality, on the Data Sources tab, select the Manual Configuration option and perform the following steps:
- Click the Add Data Source(s) button. In the Add Data Source(s) dialog box, select the required data sources. Click Apply .
Determine the level of access for each data source:
- Read-only rights for the data source
Ability to edit the data source, which includes:
- Disabling the data source connection
- Changing the Source Name
- Customizing labels for the Field IDs, enabling “Distinct Count” and creating custom “Formulas”
- Editing the Visualization options and enabling or disabling styles
- Ability to delete data source(s)
OPTIONAL: To provide access rights to specific attributes and/or metrics, click Add Filter .
Select the attributes and metrics that the group can access. If there are saved filters available, then a dedicated tab will also be available.
Using the filter in the Fields column, you can limit the visibility of the fields from your data source for the user group. By default, all the fields are available for the user group. Clear the checkmarks near the required items in the Group Fields dialog box to limit their availability for the group.
Click Save .
Repeat the steps above to assign access privileges to all the different groups you may have in Zoomdata. Administrators will be able to edit and change these parameters at any time.