Users and Permissions
You can invite members to your project in Hashboard to allow them to query and explore data. You can use roles to limit the actions a user can take - it probably makes sense to start people with lower levels of permissions across the board and increase as you realize they need more advanced permissions.
All users in your project will be able to view data in your project, but only owners can add additional members and only editors can change data models.
It's a best practice to only allow analysts and analytically-inclined members of your team to edit data models. See Data Modeling Best Practices
Add a user
-
Go to the
People
(opens in a new tab) page using the link in the project dropdown. -
Click
Users
. -
Click
+ Add User
. -
Fill out the form and click the submit button:
Add User
- Email: Email to send the invite to. Projects can be setup to only allow
email addresses on your domain (eg. only emails ending in
@yourcompany.com
). - Full Name: User's display name. They can change this themselves at any time.
- Role: The user's role (see below).
- Email: Email to send the invite to. Projects can be setup to only allow
email addresses on your domain (eg. only emails ending in
-
The invited user will receive an email with an invite link. The user can then either create a username and password or use Google authentication to login.
Default roles
Hashboard allows you to select one or more roles as "Default roles" for your project. These roles are automatically selected when you add new users to your project.
You can change the default roles for your project by going to the People
from the left sidebar and clicking on the Roles
sections.
Below the Roles
section there is a Default Roles
section where you can select the default roles for your project. You must have at least
one default role selected at any given time, so to swap default roles, add a second role then remove the first role.
Deleting default roles— You cannot delete a role if it is selected as a default role.
System provided roles
There are four roles in Hashboard with increasing levels of permissions. When adding a new user, our system-provided default role is Editor
.
Role | Description |
---|---|
Owner | Owners can manage members in a project. |
Editor | Editors can manage data models and data connections, both creating and editing existing data models & data connections. |
Collaborator | Collaborators can interact with shared views, query data sources, explore data and create new saved explorations. |
Viewer | Viewers can interact with shared views, query data sources, and explore data. |
What permission do I need to Download underlying data
?— Users need a
role with the READ_RAW_DATA
permission to download underlying data. All of
Hashboard's system provided roles have this permission by default so to
restrict the downloading of underlying data for a subset of users you would
need to remove the READ_RAW_DATA
permission from one of system provided
roles, or create a new role that does not have the READ_RAW_DATA
permission.
Modifying roles
Limitations— Roles are limited today in Hashboard to two main functions:
- governing which actions can be taken such as creating saved explorations and editing dashboards; and 2) governing access to data models. If you do not have access to read data from a data model, then saved explorations for that data model will not work. Today, it is not possible to remove access from a specific saved exploration independently from a data model.
Hashboard uses role based access control to allow users to do specific actions within Hashboard. You can assign system provided roles, configure data access and limit which actions specific users can take inside of Hashboard.
- Navigate to the
People
page using the link on the left sidebar. - Click
Roles
. - Click the pencil
✏️
icon next to the role you want to modify. - You can edit the role name and description in the main role page.
- To edit a permission, again click on the pencil
✏️
icon to edit a permission rule. - Here you can modify the permissions and resources associated with the permissions.
Adding new roles
- Navigate to the
People
page using the link on the left sidebar. - Click
Roles
. - Click the
+ New Role
button. - Fill out the form and click the submit button:
Create Role
- Name: The name of the role.
- Description: A description of the role.
- Your new role should appear in the list of roles. Click
Edit
button to edit the role. - Your new role will initially have no permissions rules. Click the
+ Add Permission Rule
button to add a new permission rule.What are permission rules?— Permission rules are a set of permissions that all operate on a common resource or resources. For example, you can create a permission rule that allows users with the role to read all dashboards in a project. You can also create a separate permission rule that allows users with the role to read only a specific data model.
- Name your permission rule with a descriptive name.
- Select resources that the rule will apply to with the
Data Access
section. Click theAdd
button to select from a list of all data models as well as a wildcard that targets any data model. Alternatively you can click theAdd all
button to add all models to the rule and the selectively remove models. - Select permissions that the rule will apply to with the
Permissions
section. Click theAdd
button to select from a list of all permissions. Alternatively you can click theAdd all
button to add all permissions to the rule and the selectively remove permissions. You can also easily start from the system defined roles by clicking one of additional buttons in thePermissions
section. - Once you are done configuring a permission rule, you can either add more permission rules or click the
Save
button to save the role. - After you save, the role is now available to assign to users.
Deleting roles
Aside from roles selected as default roles, you can delete roles at any time.
When you delete a role, users with the deleted role will immediately lose that role and any permissions associated with it.
There is not way to restore a deleted role within Hashboard, but if you accidentally delete a role and need to restore it, contact us at support@hashboard.com and our support team can restore it for you.