How to disable data access

Have more questions? Submit a request

What if you want to block access to data for your users, and only allow them to access metadata?

πŸ€“ Who can do this? You will need to be an Admin user to configure these options.

There are different ways to do this in Atlan. From the most wide-reaching to the most granular, they are:

Block all querying

To stop all users from querying data, across all data assets:

  1. From the left menu of any screen, click Admin.
  2. Under Workspace, click Labs.
  3. Toggle the Insights option off. (This should also deactivate all sub-options of Insights.)
🚨 Careful! Users will still be able to preview sample data, even with Insights turned off.

Block by source

When setting up crawler

To stop all users from accessing data for a source, when setting up the crawler:

  • Set Allow SQL Query to No to stop users from querying any data in the source.
  • Set Allow Data Preview to No to stop users from previewing any data in the source.

So to block all access to data for that source, set both options to No.

When setting up connection's credentials

You can configure the credentials for some data sources without data access permissions.

  • If the credentials cannot query data, Atlan will not be able to query or preview data.
  • If Atlan cannot query or preview data, no users in Atlan can query or preview data either.
🚨 Careful! This depends on the connector β€” some connectors need a level of data access even to crawl metadata. The specific set up guide for each connector gives you the minimal set of permissions.

Block by asset

πŸ€“ Who can do this? In addition to being an Admin user, you will need to be a connection admin for the source containing the assets.

To stop users from querying or previewing data for specific assets:

  1. Define a persona with a data policy that denies access to those assets.
  2. Add the users to that persona.
🚨 Careful! To ensure Atlan blocks data access for all users (including connection admins) the data policy must explicitly deny query access. A lack of data policy (implicit deny) will not prevent connection admins from querying and previewing data.

Block by classification

To stop users from querying or previewing data that has a particular classification:

  1. Define a purpose on that classification.
  2. Within the purpose, define a data policy that denies query access for those users. (This will also apply to data previews.)

Even if only a single column has the classification, Atlan will block querying and previewing of the entire asset.

Related articles

Was this article helpful?
0 out of 0 found this helpful