Data space roles and permissions

When you add members to a data space, you can assign them roles inside the space. Space roles are defined by a set of permissions on the data space, and the resources inside the space.

When you create a data space, you become the owner of the data space and all resources inside of that space. Space owners, tenant admins, and data admins can add members to the data space. Also, data space members who are granted the Can manage role can add other members to the space.

As data tasks operate in the context of the owner of the data project they belong to, the following roles are required:

• The owner of a data project must have the Can edit role in the space where the data project resides. This allows the catalog to be updated with table metadata and ensures that storage (QVD) tasks in the data project can create data files in the space.

• The owner of a data project must have the Can consume data, Can edit, or Can manage role in the spaces that contain:

  • Target data connections that are used in the data project.

  • Source data connections used in data tasks in the data project.

• For any data task that uses data connections through Data Gateway - Data Movement, the owner of the data project must have the Can consume data, Can edit, or Can manage role in the space where the data gateway resides.

To create data connections to access data through Data Gateway - Data Movement, the following roles are required for the user who creates the data connection:

• Can manage on the space where you create the data connection.

• Can consume data, Can edit, or Can manage on the space where the data gateway resides.

Data space roles

Members of a data space can be assigned one or more of the following data space roles.