Skip to main content
Version: v4

1.3 Data Authorization Workflow

With Canner Enterprise's data authorization workflow, you can simplify data access from the source to any user or group in your organization, while keeping the whole process secure and compliant.

Canner Enterprise has two main data authorization concepts: Data Source and Workspace.

The workflow is described using the role names configured in the platform:

  • Data Owner
  • Data Steward
  • Data Analyst
  • Data Consumer

Data source authorization​

  1. The ability to create data sources must be granted by the Admin
  2. A role with the ability to create data sources is a Data Owner
  3. The Data Owner sets up a new data source, adds users to the data source's permission list, and assigns them the Data Steward role.

Workspace authorization​

  1. The Data Steward owns the data and authorizes its use on a per-workspace basis
  2. The ability to create workspaces must be granted by the Admin
  3. Once a Data Steward can create workspaces, they become a Workspace Owner
  4. After the Workspace Owner creates workspaces (one or more), they can grant data source tables to those workspaces (one or more). Each workspace can have a different combination of grants by data source / table / column
  5. In a workspace, the Workspace Owner can add members and assign them one of 3 roles:
    1. Owner - Other users can also be made workspace Owners (usually as a backup)
    2. Data Analyst - Can analyze data and build new datasets in the SQL Editor, and grant the finished datasets to Data Consumers
    3. Data Consumer - Can use datasets and share data to different application platforms.

The overall data authorization flow is shown below.

Data authorization overview

Read the docs by role​

Data authorization involves 4 roles. To read the documentation by role, start here:

Learn more about data source access control and workspace access control.