Domain policies allow you to control which users can (or cannot) take certain actions within a data domain or subdomain β for example, creating subdomains and data products, updating metadata, and more.
In Atlan, you can define domain policies for data domains through personas. This framework allows you to ensure that your data products are secure and only accessible to the individuals or teams involved in managing the data.
Create a persona
To create a persona:
- From the left menu of any screen, click Governance.
- Under Access Control, click Personas.
- If this is the first persona, click the Get started button. Otherwise click the New persona button.
- Enter a meaningful name for the persona, (optional) a description, and then click Create.
You now have an empty persona. It won't do much until you complete the next steps, too!
Add users and groups
To add users and groups to the persona, from within the persona:
- To the right of the Users and groups box, click the Add button.
- Select users and / or groups:
- Under the single-user icon, select users to add to the persona.
- Under the double-user icon, select groups to add to the persona.
- Click the Update button to save the users and groups to the persona.
Now this persona will be available to those users and groups. It still won't do much, though, without some policies...
(Optional) Add rich documentation
To add rich documentation describing the persona:
- Under Summary, then Channels, add any Slack channels relevant to the persona.
- Under Resources, add links to external resources like PDFs, repositories, Notion, Confluence, Google Drive β anything that has a URL.
- Under Readme, write a richly-formatted description of the persona.
Add a domain policy
To add a domain policy to the persona, from within the persona:
- Change to the Policies tab.
- Click the New Policy button and choose the type of policy.
- Choose Domain policy.
- Under Name, briefly describe the policy's intention.
- Under Select domains, choose the domain on which to apply the policy β for example,
Finance
. - (Optional) For Configure permissions, choose the permissions the policy will grant. By default, all permissions will be granted. To select others:
- To the right of Configure permissions, click the Edit link.
- Select the permissions required. If you are unsure what they do, hover over the checkbox to see a more detailed description of each one. You can enable or limit the following:
- Read: permission to view metadata, resources, and READMEs for data domains
- Update Domains: permission to update metadata, resources, and READMEs for data domains
- Create Sub-domains: permission to create new data subdomains within a domain
- Update Sub-domains: permission to update metadata, resources, and READMEs for data subdomains
- Create Products: permission to create new data products within a domain
- Update Products: permission to update metadata, resources, and READMEs for data products
- Delete Products: permission to delete data products within a domain
- Update Custom Metadata For Domains: permission to update custom metadata for data domains
- Update Custom Metadata For Sub-Domains: permission to update custom metadata for data subdomains
- Update Custom Metadata For Products: permission to update custom metadata for data products
- At the bottom of the list, click Save.
- At the bottom of the Domain policy sidebar, click Save.
(Optional) Set preferences
To set preferences for the persona:
- Change to the Preferences tab of the persona. From the left menu, configure the following:
- To set the default landing page for the persona:
- Click Navigation to view landing page preferences.
- For Set default landing page, click the dropdown and then click Products so that your users land on the data products page when they log into Atlan.
- To limit the out-of-the-box tabs that should be visible to the persona:
- Click Asset sidebar to view asset sidebar preferences.
- Click the checkbox to the left of each tab's name to include it (on) or exclude it (off) for the persona.
- To limit the asset filters that should be visible to the persona:
- Click Asset filters to view asset filter preferences.
- Click the checkbox to the left of each tab's name to include it (on) or exclude it (off) for the persona.
- To limit the custom metadata that should be visible to the persona:
- Click Custom metadata to view custom metadata preferences.
- Click the checkbox to the left of each custom metadata structure to include it (on) or exclude it (off) for the persona.
- To personalize your data products, click Products and then click the Add cover image button to set a cover image for data products within your selected domain.