1OwnerFull organization authority
Access governance
Match every permission to a clear role.
Workspace membership, role capabilities, and review cadence remain visible without exposing identities.
Reporting periodLast 30 generated daysUpdated Aug 13 · 08:15
1AdminWorkspace and connection management
2AnalystsAnalysis and approved exports
3StewardsDefinitions, quality, and catalog
4ViewersRead-only governed views
Role capability matrix
Illustrative least-privilege model for a workspace
| Capability | Owner | Admin | Analyst | Steward | Viewer |
|---|---|---|---|---|---|
| View analytics and metrics | |||||
| Manage source connections | |||||
| Approve metric definitions | |||||
| Resolve quality exceptions | |||||
| Manage membership and roles | |||||
| Export governed aggregates |
Access review
Synthetic policy status
Last role reviewAug 10Complete
Next scheduled reviewNov 10Quarterly
Unresolved access requests0Clear
Tenant boundary
Access decisions begin with organization membership
User→Membership→Organization→Workspace + role
A valid identity alone is not enough. Every query must also resolve a membership and enforce the matching organization scope.