Immuta Permissions and Personas
Permissions are a system-level mechanism that control what actions a user is allowed to take through the Immuta
Permissions can be added to any user by a User Admin (any user with the
USER_ADMIN permission), but the permissions
themselves are managed by Immuta and cannot be added or removed in the Immuta UI; however, custom permissions
can be created on the App Settings page.
The table below illustrates what Immuta permissions map to specific Immuta personas.
||These users have access to the administrative actions for the configuration of Immuta. They can|
||These users can access audit logs for their entire organization.|
||Data Governors set Global Policies within Immuta, meaning they can restrict the ways that data is used within Immuta across multiple projects and data sources. Governors can also set purpose-based usage restrictions on projects, which can help limit the ways that data is used within Immuta. By default, Governors can subscribe to data sources; however, this setting can be disabled in the Immuta Configuration, removing the Governor's ability to create or subscribe to data sources. Additionally, users can be a Governor and Admin simultaneously by default, but this setting can also be changed in permissions, rendering the Governor and Admin roles mutually exclusive.|
||For data to be available in the Immuta platform, a Data Owner — the individual or team responsible for the data — needs to connect their data to Immuta. Once data is connected to Immuta, that data is called a data source. In the process of creating a data source, Data Owners are able to set policies on their data that restrict which users can access the data source, which rows within the data a user can access, and which columns within the data a user can see or be restricted. Data Owners can also decide whether to make their data source public, which makes it available for discovery to all users in the Immuta Web UI, or make it private, so that only the Data Owner and its assigned subscribers know it exists.|
||Data Users query data that’s been made available through Immuta.|
||Project Managers oversee projects by creating, approving, or denying purposes in projects and adding and removing project data sources.|
||These users have access to the administrative actions for managing users in Immuta. They can|
See Manage Personas and Permissions for a tutorial on adding and removing permissions.