Skip to main content
Answer

Assign User to dataset

  • June 6, 2024
  • 7 replies
  • 49 views

Pablo Palacios
Seasoned
Forum|alt.badge.img+3

HI:

How can I configure that a user has access to only a specific dataset?

Best answer by Gaetan Helness

Thank you. You need to scope the Asset resource in your case (not Timeseries). 

Make sure you do not have a capability with Assets: scope All in addition since the capabilities add up

 

7 replies

Gaetan  Helness
MVP
Forum|alt.badge.img+1

Hi,

You can do that as part of the CDF Access Management

For example, you can scope the Time series resource type on a dataset scope

 


Pablo Palacios
Seasoned
Forum|alt.badge.img+3

Thank you @Gaetan Helness 

I did the steps you told me, but the user still continues to see all the assets of all the datasets.

What am I doing wrong?


Gaetan  Helness
MVP
Forum|alt.badge.img+1

Can you send a screenshot of the capabilities around assets. 
Good to know that the capabilities in the group are additive, make sure there is only one for assets.

You can also ask the user to inspect which group he is member to as well as the capabilities through the Access info at the bottom left (User name)


Pablo Palacios
Seasoned
Forum|alt.badge.img+3

member:

 

role:

capabilities:

 

user panel:

 


Gaetan  Helness
MVP
Forum|alt.badge.img+1

Thank you. You need to scope the Asset resource in your case (not Timeseries). 

Make sure you do not have a capability with Assets: scope All in addition since the capabilities add up

 


Andre Alves
MVP
Forum|alt.badge.img+14

@Gaetan Helness! Good to know that.
Your explanation was very helpful. I was wondering if it's possible to restrict data deletion, allowing users to add and update assets but not delete any data.


Gaetan  Helness
MVP
Forum|alt.badge.img+1

Great to hear that helps!

I actually do not think this is possible, we only distinguish between read and write capabilities. 

I suggest you open a Product idea https://hub.cognite.com/topic/new?type=idea

You will then get some feedback if that is somehow possible