The policies UI shows a listing of all of the Policies managed by Datashare. A policy consists of datasets and tables, row level access tags (if applicable), and GCP Marketplace integration. Take caution whenever making changes to policies as they will potential impact one or many customers.
- Click the 'CREATE POLICY' button on the top right.
- Enter a policy name and description.
- Choose whether you want to use Dataset-based or Table-base Access.
- Dataset-based Access: Grants access at the more granular table or view level. Choose this option if you want any future tables/views added to the policy to automatically be granted to existing users entitled to the given policy.
- Table-based Access: Grants access at the Dataset (grouping of tables/views) level. Choose this one if you want full control over which tables/views are included in the policy.
- Select the list of Datasets or Tables depending on if you're using Dataset-based or Table-based access.
- Enter the list of Row Access Tags. Row access tags are simple string filters that are used by tables/views associated with the policy in order to filter rows for users*.
- Click 'SAVE'. Details on the 'Marketplace' section will be covered in the Integrating with Marketplace section.
* Row Access Tags currently only work for users, they do not work with groups. An enhancement request is tracked in #212.
- Click on the pencil icon in the rightmost column.
- Make the necessary modifications. Ensure caution as an edit to an existing policy will impact all users entitled to it.
- Click 'Save'.
Ensure caution when deleting any policy. If you have GCP Marketplace integration set up, this can break any solution or user associations for purchased solutions that you are selling through marketplace.
- Click the trash image on the rightmost side.
- Click 'DELETE' to confirm the deletion.