Skip to content
Snippets Groups Projects
05-setting-permissions.md 2.82 KiB
Newer Older
  • Learn to ignore specific revisions
  • # Permissions overview
    
    There are always going to be sensitive bits of information in your data, and thankfully Metabase provides a rich set of tools to ensure that people on your team only see the data they’re supposed to.
    
    ## Key points regarding permissions
    
    Maz Ameli's avatar
    Maz Ameli committed
    
    
    - Permissions are granted to [groups](04-managing-users.md#groups), not people.
    
    - People can be in more than one group.
    
    - If a person is in multiple groups, they will have the _most permissive_ access granted to them across all of their groups. For example, if a person is in three groups, and any one of those groups has access to a database, then that person will have access to that database.
    
    ## What you can set permissions on
    
    - [Data permissions](#data-permissions)
    - [Collection permissions](#collection-permissions)
    - [Application permissions](#application-permissions)
    - [SQL snippet folder permissions](#sql-snippet-folder-permissions)
    
    ### Data permissions
    
    - [Databases connected to Metabase][data-permissions]
    - [Tables and schemas][table-permissions] in those databases
    - [Rows and columns][data-sandboxing], a.k.a. data sandboxing (available on paid plans)
    
    ### Collection permissions
    
    [Collection permissions][collections] dictate which groups can view/edit items in collections, including:
    
    - Questions
    - Dashboards
    - Models
    - Events
    - Timelines
    
    ### Application permissions
    
    [Application permissions](application-permissions.md) (available on paid plans) dictate access to Metabase application-level features, including:
    
    - **Settings**: The Settings tab in the Admin panel.
    - **Monitoring access**: The Tools, Audit, and Troubleshooting tabs in the Admin panel.
    - **Subscriptions and Alerts**. Which groups can create/edit dashboard subscriptions and alerts.
    
    Sameer Al-Sakran's avatar
    Sameer Al-Sakran committed
    
    
    ### SQL snippet folder permissions
    
    For plans that include [SQL Snippet Folders][sql-snippet-folders], you can also set permissions on those folders.
    
    Sameer Al-Sakran's avatar
    Sameer Al-Sakran committed
    
    
    ## Changing permissions
    
    Whenever you change permissions for a group, make sure you:
    
    - Save your changes.
    - Click yes to confirm your choices.
    
    ## Further reading
    
    - [Managing people and groups](04-managing-users.md)
    
    - [Permissions guide][permissions] in Learn Metabase
    - [Troubleshooting permissions][troubleshooting-permissions]
    
    [collections]: 06-collections.md
    [dashboard-subscriptions]: ../users-guide/dashboard-subscriptions.md
    [data-permissions]: data-permissions.md
    [pulses]: ../users-guide/10-pulses.md
    [data-sandboxing]: ../enterprise-guide/data-sandboxes.md
    [permissions]: /learn/permissions/
    [sandbox-columns]: /learn/permissions/data-sandboxing-column-permissions.html
    [sandbox-rows]: /learn/permissions/data-sandboxing-row-permissions.html
    [slack-integration]: 09-setting-up-slack.md
    
    [sql-snippet-folders]: ../enterprise-guide/sql-snippets.html
    [table-permissions]: data-permissions.md#table-permissions
    
    [troubleshooting-permissions]: ../troubleshooting-guide/permissions.html