Introduction
Managing users and their roles is an important part of ensuring effective access control and maintaining data security within Data Workbench. Proper user management plays a pivotal role in:
Data Security: Managing user roles restricts access to sensitive information, minimizing data breach risks and unauthorized changes.
Collaboration: Effective user management enables seamless team collaboration by granting appropriate access rights for efficient information sharing.
There are three roles you can be assigned in Data Workbench: (1) Company Account Admin, (2) Workspace Admin, or (3) Workspace Reader. Each has different access levels and rights, with the Company Account Admin having most.
Before explaining the roles, let's first define company account and workspace.
Company account
Company account
The company account serves as a central hub where access permissions to applications are defined and managed for various users. Here, admins configure all associated workspaces. It acts as the focal point for core configuration management. The settings established within the company account form the foundation for workspaces under its control.
These settings are configured in a separate application called Veracity Access Hub. To read more, please refer to the documentation.
Workspace
Workspace
A workspace is a instance of Data Workbench where data is stored and can be worked with. This means that data is only available in this workspace, and is not available in another even if they are under the same company account. Most customers have one workspace. In the below illustration we see this in action. The company account is named Acme, shortened AC. Within this company account, the Company Account Admin has created one workspace named Acme's workspace.
Next, let's explore the distinct capabilities of each role within Data Workbench.
Company Account Admin
Company Account Admin is the highest access level you can have. Here, you manage the rights of all users across all instances of Data Workbench that your company has created. You also have the ability to create more workspaces. This is done outside Data Workbench in a separate application called Veracity Access Hub. To read more about managing access as a Company Account Admin, please refer to the documentation.
Workspace Admin
Workspace Admins have comprehensive control over the workspace, including configuration, data read/write privileges, and user management. Only admins can invite new users to the workspace.
Workspace Reader
Workspace Readers have limited access, enabling them to view and read data within the workspace. They also have the right to share data sets they have access to. They do not have the rights to invite other members to the workspace.
Finding out what role users have
User's roles can be changed by an admin within the workspace. This is done within the Workspace page, which is accessed from the top menu.
On this page you will see all members who have access to the workspace. Their access level is shown to the right of their name and e-mail address. Workspace admins are grouped and shown on top, then workspace readers are shown.
On the bottom of the page you can view who the Company Account Admins are. They have access to all workspaces, and have the same rights as a Workspace Admin within a workspace.
