Groups

Sprinkle gives you the flexibility to be in control of your data, and manage access & permissions of groups of users.

Managing, assigning & adjusting various permissions for a huge number of users can be a tedious task. Hence, use groups to efficiently manage access of similar kinds of users.

To quickly get you started with managing the accessibility, Sprinkle has default groups created.

Default Groups

Administrator :shield:

The Admin has complete access to the tool and has no restrictions. They are in charge of administering and facilitating everything on the platform. Admins can be senior members of the data team who has detailed knowledge of the various data systems. The admin can manage other users on the platform and their access.

Data Team :woman_technologist::man_technologist:

Their permissions are similar to an admin’s, except for the administrative permissions. On the platform, they have access to everything they need to build pipelines, models, reports, dashboards, and more. They can create new datasets from data sources, build models, SQL Transforms, Reports, SQL explore, etc. The group can be used to manage and provide access to Data Engineers and Data Analysts.

Business Team :man_office_worker::woman_office_worker:

This group of users can create and view reports and dashboards. In addition to consuming data assets, users can also create them using self-serve analytics features.

Viewers :eyes:

They have view-only permissions on reports and dashboards.

API_Access Grp :robot:

Made to provide API access, this group has permissions to view SQL Explore, Reports, and Model functionalities, along with the create and edit permissions on SQL Transform and Pipelines .

Default permissions of these default groups are covered in the permissions section below.

Create New Group

Sprinkle provides an option to also create groups according to the customized needs of a group of users in the organization.

To create a new group, through the left navigation panel, :mouse_three_button:click on Admin -> Access Management -> Groups. :mouse_three_button:Click on New Group.

What are Groups made of?

Members :people_holding_hands:

Admin can add members to the group easily, just click on Add to get started. From the available drop-down list of the users in Sprinkle, Admin can select the users to add them to the group.

Permissions

Using the easy & intuitive UI, admins can easily manage the permissions of various groups across the various modules in Sprinkle. Below is a snapshot of the default permissions for the users in various groups.

Group Permissions - Snapshots

Admins :shield:

Data Team :woman_technologist::man_technologist:

Business Team :man_office_worker::woman_office_worker:

Viewers :eyes:

API :robot:

Folders

Along with permissions to various modules, the admin can also manage the access of data to the users in the groups through folders.

Navigate to the folders tab and Add Folder, in case you want to provide additional access to a specific folder to the users in the group. Read more about folders here.

Row-level Security

Row-level security lets you manage the row-level access of the models. It lets you restrict users’ access only to the relevant rows of data in the table. For example, you can restrict users in Karnataka to access the sales data only relevant to Karnataka from the sales table.

:tools:Steps to Use Row-level Security

:digit_one:Define RLS Attribute - Admin Users

The Row Level Security (RLS) feature allows you to define the columns on which an RLS attribute should be applied. Once configured, the selected column can be used to control data access at the row level.

Creating an RLS Attribute

To create a new RLS attribute:

1. Navigate to Access Management → Row level security.
2. Click + New RLS attribute in the top-right corner.
3. A modal opens asking you to enter the Attribute Name.
4. Enter a unique and meaningful name for the RLS attribute.
5. Create the attribute.

Once created, the RLS attribute will be available in the Row-level security attributes list.

Steps to Add an RLS Attribute

1. Navigate to Admin -> Access Management → Row level security and open the required RLS attribute.
2. In the Table assignments section, enter the table or schema name in the search box.
3. Click Search tables.
4. Select the required table, A modal will open

5. Select RLS column on which you want to apply the RLS.
6. For Entity Access -> Choose whether this RLS mapping applies to every entity associated with the table or only to entities you select.
7. Click Add Table.

The RLS attribute is now assigned to the selected column of the table.

Example

For example, if the RLS attribute Stlname needs to be applied to the attributes_type column of the ds_salesforcepagetest_table_2 table:

• Table: ds_salesforcepagetest_table_2
• Schema: sprinkletest
• Column: attributes_type

Search for ds_salesforcepagetest_table_2 and click Search tables. The table will appear in the table assignments list.

Click Edit for the table, select attributes_type as the column, and click Save.

The Stlname RLS attribute is now applied to the attributes_type column of ds_salesforcepagetest_table_2.

Assigning RLS Values

Once an RLS attribute has been configured for the required table and column, you can assign values to groups or individual users.

Assign RLS Values to a Group

1. Navigate to the Groups tab within the RLS attribute.
2. Click on +Assign Group.
3. Select the required group from dropdown.
4. Assign the appropriate value for the RLS attribute.
5. Click on Assign.

The assigned RLS value will apply to users who are members of the group.

Assign RLS Values to a User

1. Navigate to the Users tab within the RLS attribute.
2. Click on +Assign Group.
3. Select the required user from dropdown.
4. Assign the appropriate value for the RLS attribute.
5. Click on Assign.

The assigned RLS value will apply directly to the selected user.