Skip to main content

 

ThoughtSpot

Data security

  1. Last updated
  2. Save as PDF

Overview

Explains what the feature is or what its benefits are to the user or customer.

Feature

Sharing and security settings govern what data a user can access and what they can do with the data. Admins can use these settings to regulate access to information and provide a personalized user experience.

Users, groups, and privileges

Data security applies to users and groups. Users can be managed manually or through LDAP. Each user can have membership in one or more groups.

Admins can make security settings that determine what users are allowed to do in ThoughtSpot. These settings are applied at the group level.

Security model for sharing objects

You can share with groups and with individual users. Sharing of tables can be defined at the table, column, or row level. This provides flexibility in modeling your data security policy. Security and sharing settings apply to several different types of objects, each of which has its own security default settings and rules.

Table 1. Security model by object type
Object type Description Default security model Sharing procedure
Tables The source data tables that have been loaded using ThoughtSpot Loader. Administrator users have access to source tables. They can share a table with other users or groups. Share tables and columns
Columns The columns in the source data tables that have been loaded using ThoughtSpot Loader. Administrator users have access to columns in the source tables. They can share selected columns with other users or groups. Share tables and columns
Rows The rows in the source data tables that have been loaded using ThoughtSpot Loader. All rows in the source tables are shared with all users by default. You can hide rows from groups based on the values they contain. Define Legacy Row Level Security
Imported data Data that was imported using a Web browser. Only the user who imported the data (and any user with administrator privileges) has access to it by default. They can share a table (or selected columns) with other users or groups. Share tables and columns
Worksheets A worksheet created using a Web browser. Only the creator of the worksheet (and any user with administrator privileges) has access to it by default. They can share a worksheet with other users or groups. Share worksheets
Pinboards A pinboard of saved search results. Anyone who can view a pinboard can share it. Share a pinboard

Row level security

ThoughtSpot includes robust row level security, which allows you to filter all objects users see based on conditions you set at the level of row values in base data tables.

  • Share tables and columns
    Administrators and owners can share Can View or Can Edit privileges on tables with other users, who can further share them with others.
  • Share worksheets
    You can share worksheets with users or with groups. Sharing a worksheet allows users to select it as a data source and search it.
  • Share a pinboard
    You do not have to be an administrator or the owner to share saved pinboards. Any user can share them, based on the access levels the user has.
  • Revoke access (unshare)
    You may need to revoke access to an object (table, worksheet, or pinboard) that you have previously shared. Unsharing an object is very similar to sharing it.
  • Row level security
    Row level security allows you to define which groups can see individual rows in a table, based on the values in one of its columns. Using row level security, you can effectively customize search results and pinboards for each group that views them.
Parent topic: About security
  1. Back to top
  • Was this article helpful?

Recommended articles

  1. There are no recommended articles.
  1. Article type
    Topic
    Release
    Version 4.2
  2. Tags
    1. 4.2
    2. source:chm
    3. stage:review