Create persona
You will need to be an admin user to create personas.
To create a persona:
- From the left menu of any screen, click Governance.
- Under Access Control, click Personas.
- If this is the first persona, click the Get started button. Otherwise click the New persona button.
- Enter a meaningful name for the persona, (optional) a description, and then click Create.
You now have an empty persona. It won't do much until you complete the next steps, too!
Add users and groups
To add users and groups to the persona, from within the persona:
- To the right of the Users and groups box, click the Add button.
- Select users and / or groups:
- Under the single-user icon, select users to add to the persona.
- Under the double-user icon, select groups to add to the persona.
- Click the Update button to save the users and groups to the persona.
Now this persona will be available to those users and groups. It still won't do much, though, without some policies...
(Optional) Add rich documentation
To add rich documentation describing the persona:
- Under Summary, then Channels, add any Slack channels relevant to the persona.
- Under Resources, add links to external resources like PDFs, repositories, Notion, Confluence, Google Drive - anything that has a URL.
- Under Readme, write a richly-formatted description of the persona.
Add policies
For the persona to really do anything, you need to define one or more policies. Repeat the following steps for each set of assets and permissions you want to control through the persona.
The higher level at which you can define the assets, the better. For example, if you create a policy at a database level, all future schemas and tables (in that database) will also be covered by the policy.
To add policies to the persona, from within the persona:
- Change to the Policies tab.
- Click the New Policy button and choose the type of policy.
Add a metadata policy
To grant or restrict permissions to change metadata:
-
Choose Metadata Policy.
-
Under Name, briefly describe the policy's intention.
-
Under Select a connection, choose the connection on which to apply the policy.
-
(Optional) For Asset selector, choose the assets the policy should control. By default, all assets in the connection are included. To select others:
- In the All assets box, click the x.
- Under Asset selector, click the Add link.
- To search for and select the assets to control with the policy, in the Add Assets dialog:
- Click Browse to search and select assets from all databases in the connection.
- Click Search to search from and select individual assets in the connection.
- Click Custom to search and select assets by their qualified name.
- Click Save to confirm your selections.
-
(Optional) For Configure permissions choose the permissions the policy will grant. By default, all permissions will be granted. To select others:
- To the right of Configure permissions click the Edit link.
- Select the permissions required. If you are unsure what they do, hover over the checkbox to see a more detailed description of each one.
- At the bottom of the list, click Save.
-
(Optional) For Deny selected permissions choose whether you want to explicitly deny these permissions.
dangerIf enabled, this will override all grants_take_priority) of those permissions from any other policies for the same users.
-
At the bottom of the Metadata Policy sidebar, click Save.
When using the custom asset selector for metadata and data policies, you can add /*
after the database name to select all the schemas in that database.
Add a data policy
To grant or restrict permissions to query or preview data:
-
Choose Data Policy.
-
Under Name, briefly describe the policy's intention.
-
Under Select a connection, choose the connection on which to apply the policy.
-
(Optional) For Asset selector, choose the assets the policy should control. By default, all assets in the connection are included. To select others:
- In the All assets box, click the x.
- Under Asset selector, click the Add link.
- To search for and select the assets to control with the policy, in the Add Assets dialog:
- Click Browse to search and select assets from all databases in the connection.
- Click Search to search from and select individual assets in the connection.
- Click Custom to search and select assets by their qualified name.
- Click Save to confirm your selections.
-
(Optional) For Deny Query choose whether you want to explicitly deny the ability to query and preview data on these assets.
dangerIf enabled, this will override all grants_take_priority) of those permissions from any other policies for the same users.
-
At the bottom of the Data Policy sidebar, click Save.
Add a glossary policy
To grant or restrict permissions to change glossary contents:
- Choose Glossary Policy.
- Under Name, briefly describe the policy's intention.
- Under Select glossary, choose the glossary or glossaries on which to apply the policy.
- (Optional) For Configure permissions choose the permissions the policy will grant. By default, all permissions will be granted. To select others:
- To the right of Configure permissions click the Edit link.
- Select the permissions required. If you are unsure what they do, hover over the checkbox to see a more detailed description of each one.
- At the bottom of the list, click Save.
- At the bottom of the Glossary Policy sidebar, click Save.
(Optional) Set preferences
You can also personalize the details users will see in the sidebar or filters menu when in a persona. This is great to limit information overload, by showing only what is relevant to a given set of users.
To set preferences for the persona:
- Change to the Preferences tab of the persona. From the left menu, configure the following:
- To set the default landing page for the persona:
- Click Navigation to view landing page preferences.
- For Set default landing page, click the dropdown and then select the page where your users should land when they log into Atlan. (See also What will be the default landing page for users with two or more personas?)
- Keep Home as the default selection for homepage.
- Click Assets to direct your users to asset search and discovery.
- Click Glossary to direct your users to glossaries.
- Click Insights to direct your users to the query editor.
- Click Products to direct your users to the homepage for data products.
- Click Custom to set a custom path of your choice. For Atlan page link, specify a path to the page in Atlan you want your users to land on and ensure that it is accessible to users in the persona. Click Save to save your preference.
- You must turn off View "All assets" in Assets Discovery from Labs in the admin center to ensure that users only land on your preselected page. Complete the steps in How to restrict asset visibility to do so.
- To limit the asset types that should be visible to the persona:
- Click Asset types to view asset type preferences.
- Click the checkbox to the left of each tab's name to include it (on) or exclude it (off) for the persona.
- To limit the out-of-the-box tabs that should be visible to the persona:
- Click Asset sidebar to view asset sidebar preferences.
- Click the checkbox to the left of each tab's name to include it (on) or exclude it (off) for the persona.
- To limit the asset filters that should be visible to the persona:
- Click Asset filters to view asset filter preferences.
- Click the checkbox to the left of each tab's name to include it (on) or exclude it (off) for the persona.
- To set the default asset name that should be visible to the persona:
- Click Asset name to set display preferences for asset name.
- Click the Prefer alias over technical name checkbox to display the alias, if added, over the technical name for the persona. Uncheck the box to display the technical name instead.
- To limit the custom metadata that should be visible to the persona:
- Click Custom metadata to view custom metadata preferences.
- Click the checkbox to the left of each custom metadata structure to include it (on) or exclude it (off) for the persona.
- To personalize your data products, click Products and then click the Add cover image button to set a cover image for data products within your selected domain.