Skip to main content
User permissions are first set on the individual database connection then more fine-tuned permissions can be assigned to individual users or groups within the organization, streamlining the management process.

​
Connection permission basics

Organization Admins and users who have Connection Admin permissions for a connection can define connection permissions.
Omni currently supports five connection roles, ordered from the least permissive to the most permissive:
  • No access
  • Viewer
  • Restricted Querier
  • Querier
  • Modeler
  • Connection Admin
For the specifics of what each role can and cannot do, refer to the Permissions reference.
Yes. Using the Base access setting, you can assign the minimum role users will have for the models in the connection. More permissive roles can be set in the connection’s Model access section. Note: The base role will override a less permissive role set in the Model access section.
Yes! In the Model access section, you can assign granular permissions to users and user groups for specific models.
A connection’s base role will override a less permissive role set in the Model access section.
It depends on what you want to achieve! Do you want to lock everything down, or only restrict access for some things? Or perhaps it varies by team or dataset?In the Common permissions scenarios guide, we’ve outlined some common scenarios and how to use permissions to achieve the desired result. For example, limiting access to folders based on the team a user belongs to.
Yes. Refer to the User license types section for more information.

​
Defining permissions for a connection

Organization Admin or Connection Admin permissions for the connection are required to define connection permissions.
To access the connection’s Permissions tab:
  1. Click Settings > Connections.
  2. Click the connection.
  3. Click the connection’s Permissions tab. On this page, you can define default access for the connection (Base access role) and assign permissions to users and user groups for specific models (Model access).
Not sure what permissions to set? Check out the Common permissions scenarios guide to learn what permissions to set in specific scenarios, such as restricting access to datasets based on team.

​
Testing data access

As you assign connection roles to users, you can impersonate them to test what users can see. This can be helpful in preemptively surfacing access warnings, which will display when users attempt to access specific types of content. Refer to the Access warnings guide to learn what an access warning is and how to resolve it.

​
License types

Omni’s licensing structure has three tiers: Viewer, Creator, and Administrator/Developer. To calculate a user’s license type, Omni looks at:
  • The user’s highest Connection role across all connections, and
  • Whether the user is an Organization Administrator. These users will have an Administrator license by default.
The following table shows how license types match to connection roles. Refer to the Permissions reference for more information about what individual connection roles can do in Omni.
License typeConnection rolePermissions
NoneNo Access❌ Cannot view content built on the connection
❌ Cannot query (topics)
❌ Cannot use SQL queries
❌ Cannot modify shared model files
❌ Cannot modify connection settings
ViewerViewer✅ Can view dashboards built on topics
❌ Cannot query topics
❌ Cannot use SQL queries
❌ Cannot modify shared model files
❌ Cannot modify connection settings
CreatorRestricted Querier✅ Can create and view workbooks and dashboards
✅ Can query topics
❌ Cannot use SQL queries
❌ Cannot modify shared model files
❌ Cannot modify connection settings
CreatorQuerier✅ Can create and view workbooks and dashboard
✅ Can query topics
✅ Can use SQL queries
❌ Cannot modify shared model files
❌ Cannot modify connection settings
Admin/DeveloperModeler✅ Can create and view workbooks and dashboards
✅ Can query topics
✅ Can use SQL queries
✅ Can modify shared model files
❌ Cannot modify connection settings
Admin/DeveloperConnection Admin✅ Can create and view workbooks and dashboards
✅ Can query topics
✅ Can use SQL queries
✅ Can modify shared model files
✅ Can modify connection settings