Grant "Manage Datasets", but lock down a few datasets

jacobferrell
jacobferrell Member
in Governance & Security

I'm hoping this question isn't as dumb as it sounds. I'd like to give a user the "Manage Datasets" grant so she can do things like access Tag Management, help with the admin, etc. However, there are a couple of datasets that contain sensitive information that I need to keep locked down from all users.

Is there any way to prevent an admin from accessing a certain dataset? Or, is there a way to grant "Manage Datasets" while still keeping some datasets locked to only one admin or the dataset owner?

Thanks!

Tagged:

Best Answer

  • ColemenWilson
    ColemenWilson Coach
    Answer ✓

    I hope someone has found a better way, but here is what we have done:

    1. Do not give them the grant to manage datasets
    2. Create a dataset tag "RESTRICTED"
    3. Add the RESTRICTED tag to restricted datasets we don't want them to see.
    4. Bulk share all datasets without the tag "RESTRICTED" to them as "Co-owner"
    -You can share 50 datasets at a time
    5. At the same time of sharing, a tag is also added in bulk to all 50 datasets called "Shared with BI Team" so I know which ones haven't yet been shared.

    This could 100% be automated using a workflow but we haven't got that far yet.

    If I solved your problem, please select "yes" above

Answers

  • ColemenWilson
    ColemenWilson Coach
    Answer ✓

    I hope someone has found a better way, but here is what we have done:

    1. Do not give them the grant to manage datasets
    2. Create a dataset tag "RESTRICTED"
    3. Add the RESTRICTED tag to restricted datasets we don't want them to see.
    4. Bulk share all datasets without the tag "RESTRICTED" to them as "Co-owner"
    -You can share 50 datasets at a time
    5. At the same time of sharing, a tag is also added in bulk to all 50 datasets called "Shared with BI Team" so I know which ones haven't yet been shared.

    This could 100% be automated using a workflow but we haven't got that far yet.

    If I solved your problem, please select "yes" above

Categories