Skip to main content

Tenant and workspace roles in Data Workbench

The different roles in Data Workbench define what you can do at the tenant and workspace level.

Veracity by DNV avatar
Written by Veracity by DNV
Updated this week

Introduction

Managing members and their roles is key to effective access control and maintaining data security in Data Workbench. With proper role management, you can:

  • Protect data: Limit access to sensitive information and reduce the risk of unauthorized changes.

  • Collaborate efficiently: Assign the right access to co-workers so they can share and use data without friction.

There are four roles in Data Workbench:

  1. Tenant Admin

  2. Tenant Reader

  3. Workspace Admin

  4. Workspace Reader

Each role comes with different access rights and responsibilities.

Tenant

A tenant is the top-level container in Data Workbench. It groups all workspaces that belong to your organization.

Tenant Admin

Tenant Admins have the highest access level. They can:

  • Manage all tenant members (invite, delete, or change roles).

  • Create, view, and configure workspaces.

  • Connect or disconnect system accounts from the tenant.

Tenant Admins have access to all workspaces and they have admin permissions in them.

If you are a Tenant Admin, you can manage your tenant and workspaces from the Administration page in Data Workbench. For details, see the documentation.

Tenant Reader

Tenant Readers have read-only rights across the tenant. They can:

  • View all tenant members and workspaces.

  • Access all workspaces in the tenant as readers.

You can promote a Tenant Reader to a Workspace Admin role in a specific workspace.

Workspace

A workspace is where you store, share, and work with data. Data is only available inside that workspace, even if other workspaces exist in the same tenant.

Workspace Admin

Workspace Admins manage all aspects of a workspace. They can:

  • Configure the workspace.

  • Read and write data.

  • Invite and delete members.

  • Assign roles to members.

Workspace Reader

Workspace Readers can view and use data in the workspace. They can share datasets they have access to, but they cannot invite or delete members or change workspace settings.

Viewing roles

Admins can change members’ roles within the workspace. To do this, go to the Members tab on the Workspace page.

On this page, you see all members who have access to the workspace. Their access level appears in the Workspace access level column.

Did this answer your question?