User Access Management

You can provide access to particular users. The list of users (people) is loaded from the identity management system you are using, for example, Keycloak, Active Directory, and LDAP authentication. See Users.

You can organize users into groups. Groups build a hierarchy that helps illustrate the distributed responsibilities of users working with data assets (entities) in ONE and sets the sharing access behavior. See Groups.

You can manage group and user access rights by assigning identity provider roles to users in your identity management system (for example, Keycloak) and creating a team of users connected by similar responsibilities on data. These roles specify the user roles defined in your company. See Identity Provider Roles.

Governance roles represent the different action sets available on particular entities for a specific access level. These roles represent various roles of users within a group. Governance roles can be assigned to either a user or an identity provider role. See Governance Roles.

You can provide access to particular entities by setting access levels for groups and specific users. Access levels determine the depth of provided access and correspond to the set of operations (basic actions) that the assignee is allowed to perform on each entity. The list of operations depends on the entity type. Custom operation sets can be configured on each entity for every access level. See Access Levels.

You can assign stewardship to select the owner group of data assets. This automatically configures the appropriate level of access to the assets the group owns depending on the roles of the group members. This is the recommended approach for managing access to your data assets. See Stewardship.

You can also provide access to specific entities with the Share feature. See Share Access to Assets.