After you've created a few objects, you can share your objects with other users. In Interana 3.9 and later, you can share an object with another user or a role, according to your role definition.
How sharing works
When you first create an object, only you and your admin can see it. Other users cannot view your object until you share it with them or with your role.
For example, User A and User B are on the product marketing team. Users A and B are both members of the same Interana role, called "product marketing". User A creates an object. User B does not see User A's object until User A shares it either with User B or with the product marketing role.
Note that admins can see all objects, even ones that you haven't shared to anyone.
Share a board or user-created object
You can share a board, property, flow, or measure that you have created. You can also share an object that another user has created, if you have been granted full write access to the object. You can share an object to an entire role according to your Interana role definition. To learn about roles and capabilities in Interana, see Manage users and roles with RBAC.
To share a board:
- In the Interana UI, navigate to the board you want to share.
- Click the Share Board icon.
- Click the plus sign to add a new row to the share list.
- Click the three dots to view a list of users and roles available for you to share with. Scroll down to see the roles.
- Select a user or role to share with.
- Select read or full write access.
- Click Save. Your board is now visible to the user or users you shared it with.
Granting another user write permission on an object means the user can edit the object and its definition, including sharing the object with more users.
To share an actor property, flow, or measure:
- Using the left menu, navigate to the object you want to share.
For example, to share an actor property, click Actor and then in the list click the name of the property.
- In the left panel, click Share.
- Click the three dots to select a role or individual user to share with.
- Select read or full write access.
- Click Save. Your object is now visible to the user or users you shared it with.
How access to an object is inherited
If a user is granted permission for an object, they get explicit permission for that object, and they automatically get implicit permission for all dependents of that object, within the limits of their dataset access.
For example, say you are granted access to a dashboard made up of several charts. You are granted explicit permission to view the dashboard, and implicit permission to view the charts, queries, and other objects that are used in the dashboard.
To the consumer of a dashboard or property, implicit and explicit permissions look the same — you can view any object that you have either implicit or explicit permission to view. But when you inspect an object in the Interana UI, you see only the users and roles with explicit permissions to view the object. The UI does not tell you who has implicit permissions on an object.
For security reasons, when you share a query using the URL (in contrast to the Share button that you can use for an object), the user does not automatically get permissions to the query. The user must have access to the underlying dataset or table.
For example, you can share a query with User B by running a query, copying the URL, and sending User B the URL through an external messaging service. For User B to view the results of the query, she needs to have access to all the data in the query.
About adding and removing objects on dashboards
Access is inherited to objects that are created privately and then pinned to shared dashboards, too. For example, say you create a query but don't explicitly grant User B access to the query. Then you pin your query to a dashboard that has already been shared with User B. Once you pin the query to the dashboard, User B can view the query.
If you remove an object from a parent dashboard, the implicit permissions on that dependent object are removed. Users with implicit permission to view that dependent object can no longer view it.
Understand inherited permissions on an object
When you're working with an object such as a board, actor, action, flow, or property, you can see who has explicit access to it.
From the Explore tab, click the name of the object you wish to inspect. The third column from the left tells you who created the object and who can view it.
To inspect the permissions on an actor property:
- On the left hand menu, click Actors.
- In the list of actors, find your actor and click its row. For example, start day.
- In the left panel, click the Share tab.
- A list displays of the users and roles with explicit permission to read or write to this actor. You can view or modify permissions on this panel.
About naming objects
One user cannot create two objects with the same name, but two users can give their objects the same name.
For example, User A can create a dashboard called "Weekly Report" and so can User B. If User A shares her Weekly Report with User B, User B will have access to two dashboards called "Weekly Report".
User B can distinguish between the two reports by navigating to the object and inspecting the Owner column.
Troubleshoot sharing issues
The following table helps you troubleshoot sharing issues.
|I can't see someone else's object. I get an error that the property does not exist, or a similar message.||
Ask them to share the object with you or with your role.
|I see a blank panel on a shared board.||The panel might contain data from a dataset that you do not have access to.|
|My object doesn't look right.||Check the owner column in the explorer table. Is it yours, or is it someone else's with the same name?|
|I can't share an object.||