GitHub user FrancescoCastaldi added a comment to the discussion: Regarding dataset related ownership & permission
Yes, this workflow is fully supported in Apache Superset by combining dataset ownership with role-based access control (RBAC). Here is how to set it up: ### Architecture: Dataset Owners vs General Consumers In Superset: - To **edit or modify a dataset** (change columns, metrics, calculated SQL expressions), a user must be listed as an **Owner** of that dataset (or be a Superset Admin). - To **use a dataset to build charts and dashboards**, a user only needs **read access** to the dataset and **datasource access** to the underlying database schema. ### Step-by-Step Configuration #### 1. Configure the General Role for Other Teams (Read and Chart Creation) In **Settings -> List Roles**, edit your standard analyst role (e.g., `Alpha` or create a custom role `Team_Consumer`): - Ensure it contains permissions: - `can read on Dataset` (allows browsing the dataset catalog) - `can read on Explore` (allows opening the chart builder) - `can write on Chart` (allows saving new charts) - `can write on Dashboard` (allows building dashboards) - `datasource access on [your_database].[your_schema]` (allows querying the underlying tables) - **Do NOT grant** `can write on Dataset` or `can delete on Dataset` to this general role. #### 2. Configure Team A's Permissions (Dataset Authors) Team A members will have the same base role plus ownership: - When a user from Team A creates a dataset (via **Data -> Datasets -> Add Dataset**), Superset automatically adds that user as the dataset **Owner**. - In the dataset edit modal, Team A users can add other members of Team A into the **Owners** field. - Only users listed under **Owners** (and Admins) are allowed to save modifications to the dataset definition. #### 3. Resulting Behavior - Users from other teams can select the dataset in Explore, write custom metrics at the chart level, and build dashboards. - When users from other teams try to edit the dataset configuration itself, the save action is restricted and denied. - Team A maintains full control over the schema, descriptions, and certified metrics. GitHub link: https://github.com/apache/superset/discussions/43003#discussioncomment-19164777 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
