Skip to main content Skip to complementary content

Data space roles and permissions

When you create a data space, you become the owner of the data space and all resources inside of that space. Space owners, tenant admins, and data admins can add members to the data space. Also, data space members who are granted the Can manage role can add other members to the space. When you add members to the data space, you can assign them roles inside the space. Space roles are defined by a set of permissions on the data space, and the resources inside the space.

Data tasks operate in the context of their owner.

  • The owner of a data task must have the Can edit role in the space where the data task resides. This allows the catalog to be updated with table metadata and ensures that storage tasks can create data files in the space.

  • To create data connections to access data through Data Gateway - Data Movement, the following roles are required:

    • Can manage on the space where you create the data connection.

    • Can consume, Can edit, or Can manage on the space where the data gateway resides.

  • The owner of a storage task must have the Can consume, Can edit, or Can manage role in the space that contains data connections to the cloud landing area.

Data space roles

Members of a data space can be assigned one or more of the following data space roles.

Data space role Summary
Is owner This member can manage the space, all data tasks and data resources inside the space, and its members.
Can view This member can view data tasks and data resources, but they cannot make changes.
Can consume This member can consume data from data tasks in the data space.
Can manage This member can manage the space details and members.
Can operate This member can view data tasks with basic details and perform actions, such as run, stop, and resume.
Can edit This member can view and edit data tasks in this space, as well as create new data assets.
Information noteMembers must have the Can consume role to use data tasks in apps. Apps that use data tasks from a data space that are shared with users who are not members of the data space can still view the app data but not the data source.

Permissions for members of the data space

The following tables outlines what specific permissions are granted to a data space member with a particular role.

Permissions on the data space

Action Is owner Can view Can consume Can manage Can operate Can edit
See data space in Data Integration home Yes Yes Yes Yes Yes Yes
Change space name, description, members, and roles Yes     Yes    
Delete space Yes     Yes    

Permissions on data projects

Action Is owner Can view Can consume Can manage Can operate Can edit
List data projects Yes Yes Yes Yes Yes Yes
Create project Yes         Yes
Update project Yes         Yes
Open project Yes Yes     Yes Yes
Delete project Yes         Yes
Operate project Yes       Yes  

Permissions on data assets and data resources in the data space

Action Is owner Can view Can consume Can manage Can operate Can edit
Create data task Yes         Yes
List data tasks and information about tasks Yes Yes Yes Yes Yes Yes
Edit data task attribute Yes         Yes
Open data task Yes Yes     Yes Yes
Update data task Yes         Yes
Delete data task Yes         Yes
Control data task (run, stop, resume, reload) Yes       Yes  
List data resources (data connections) Yes Yes Yes Yes Yes Yes
Add data connection Yes     Yes    
Edit data connection Yes          
Delete data connection Yes     Yes    

Permissions for users with security roles

The following tables outlines what specific permissions are granted to a user with a specific security role with regard to data spaces, and data assets and data resources in a data space.

Permissions on data spaces with security roles

Action Tenant admin Data admin Data space creator
Create data space Yes Yes Yes
See data space in Data Integration home Yes Yes  
Change space name and description Yes Yes  
Delete space Yes Yes  
Change space owner Yes Yes  

Permissions on data projects with security roles

Action Tenant admin Data admin
List data projects Yes Yes
Open project Yes Yes
Delete project Yes Yes
Change owner of project Yes Yes

Permissions on data assets and data resources with security roles

Action Tenant admin Data admin
List data tasks and information about assets Yes Yes
Open data task Yes Yes
Delete data task Yes Yes
Change owner of data task Yes Yes
List data resources (data connections) Yes Yes
Delete data connection Yes Yes
Change owner of data connection Yes Yes
Change space of data connection Yes Yes

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!