System Administrator Introduction to Immuta
Audience: System Administrators
Content Summary: This section introduces System Administrators to the Immuta platform and supports them in managing users, groups, authorizations, and permissions through Immuta, allowing Administrators to make sure their organization is using its data efficiently and in a way that meets their organizations' needs. Additionally, this section contains installation and configuration documentation for System Administrators.
This page introduces Administrators to Immuta as a whole, while the rest of this System Administrator section includes conceptual pages, which define major features and terms, and tutorial pages, which provide step-by-step instructions for managing users, groups and authorizations, permissions, and installation.
- User Impersonation Tutorial
- Configuration Builder Tutorial
- Query Engine Authentication
- Email Notifications Tutorial
- Immuta HDFS Principals Tutorial
- ODBC Drivers Tutorial
- HA Database Configuration Changes Tutorial
- External Catalogs Configurations
- Identity Managers Tutorials
Immuta: A Single Access Point
The Immuta platform solves two of the largest issues facing data-driven organizations: access and governance. In large organizations, it can be difficult, if not impossible, for data scientists to access all the data they need. Once they do get access, it’s often difficult to make sure they use the data in ways that are compliant.
The Immuta platform is meant to solve both problems by providing a single, unified access point for data across an organization and ensuring that all restrictions placed on data are dynamically enforced through the platform. Because the Immuta platform unifies access to data, governing that access is of primary concern. Implemented properly, the Immuta platform can ensure that only the right people see the right data under the right conditions.
Immuta User Roles
User roles in Immuta are fluid and interdependent, and understanding these different roles is essential to effectively sharing, analyzing, and protecting data and maintaining compliance.
Data Owners: In order for data to be available in the Immuta platform, a Data Owner — the individual or team responsible for the data — needs to connect their data to Immuta. Once data is connected to Immuta, that data is called a data source. In the process of creating a data source, Data Owners are able to set policies on their data source that restrict which users can access it, which rows within the data a user can access, and which columns within the data source are visible or masked. Data Owners can also decide whether to make their data source public, which makes it available for discovery to all users in the Immuta Web UI, or made private, which means only the Data Owner and its assigned subscribers know it exists.
Data Users: Data Users consume the data that’s been made available through Immuta. Data Users can browse the Immuta Web UI seeking access to data and easily connect their third-party data science tools to Immuta.
Project Owners: These users can create their own project to restrict how their data will be utilized using purpose-based restrictions or to efficiently organize their data sources.
Governors: Governors set Global Policies within Immuta, meaning they can restrict the ways that data is used within Immuta across multiple projects and data sources. Governors can also set purpose-based usage restrictions on projects, which can help limit the ways that data is used within Immuta. By default, Governors can subscribe to data sources; however, this setting can be disabled in the Immuta Configuration, removing the Governor's ability to create or subscribe to data sources. Additionally, users can be a Governor and Admin simultaneously by default, but this setting can also be changed in the Configuration Builder, rendering the Governor and Admin roles mutually exclusive.
Admins: Another type of Immuta user is the System Administrator, who is able to manage the permissions, authorizations, and groups that attach to each user. Permissions are only managed locally within Immuta, but groups and authorizations can be managed locally or derived from user management frameworks such as LDAP or Active Directory that are external to Immuta. Audit users, who have special privileges similar to Admins, have the ability to view all of the audit logs within Immuta. By default, Admins can subscribe to data sources; however, this setting can be disabled in the Immuta Configuration, removing the Admin's ability to create or subscribe to data sources. Additionally, users can be an Admin and Governor simultaneously by default, but this setting can also be changed in the Configuration Builder, rendering the Admin and Governor roles mutually exclusive.
The Admin page is visible only to System Administrators and allows them to manage license keys, users, permissions, authorizations, and groups from three different tabs: Users, Groups, and Licenses. The major features of these tabs are outlined below.
On this tab, Administrators can add users, filter the list of users, or navigate to users' profiles by clicking on their name in the sidebar on the left.
After clicking on an individual user from this list, the user's email, position, and last login and update appear in the center of the page. From here, Admins can manage the user's Permissions, Authorizations, and Groups.
Similar to the Users tab, the Groups tab includes a list of Groups in the left sidebar. After clicking on a specific Group, Administrators can view the Group details, add and remove Group members, and manage Authorizations for the Group.
This tab includes a list of license keys, their expiration dates, the total number of seats, and the date the keys were added. Administrators can also add and delete license keys from this page.