Overview
All users in Atlan need to be assigned one of the following predefined roles.
🚨 Careful! User roles play a relatively small part in determining access to metadata and data. For more details on all the possible access control mechanisms, see How do I control access to metadata and data?
Admin
An admin user can manage Atlan:
- Set up integrations with external collaboration tools
- Set up data connections and run workflows
- Manage users, groups, classifications, and access policies
- Maintain extensions to the metadata
- Turn experimental features on and off
In addition, the admin user can do everything the member user can do.
Member
A member user can discover, maintain, and query assets:
- Find and view context about assets
- Update context about specific assets (via personas and policies)
- Suggest updates to context for all other assets
- Approve or reject suggested metadata changes (via personas and policies)
- Preview and query data in specific assets
Guest
A guest user can only discover assets:
- Find and view context about assets
- Update context about specific assets (via personas and policies)
- Never suggest updates to context for any other assets
- Never preview or query data in any assets
Detailed permissions
| Permission | Admin | Member | Guest |
|---|---|---|---|
| Manage classifications | ✅ | ||
| Manage custom metadata and options | ✅ | ||
| Manage users and groups | ✅ | ||
| Manage access (personas, purposes, policies) | ✅ | ||
| Edit the organization's profile | ✅ | ||
| Create API tokens | ✅ | ||
| Set up SSO | ✅ | ||
| Create workflows | ✅ | ||
| Approve or reject suggested metadata changes | ✅ | ||
| Manage glossaries (including bulk upload) | ✅ | ||
| Manage categories and terms | ✅ | ✅ | |
| Preview data assets | ✅ | ✅ | |
| Run queries | ✅ | ✅ | |
| Create collections, folders, and saved queries | ✅ | ✅ | |
| Suggest changes to metadata | ✅ | ✅ | |
| Edit metadata (via personas and policies) | ✅ | ✅ | ✅ |
| View basic metadata for assets | ✅ | ✅ | ✅ |
