Understanding lock icons
The lock icon on an asset in Atlan indicates that the current user has limited permissions on it. The user can see the asset exists but cannot perform certain actions on it.
Connection admins
Connection admins manage connectivity to a data source. Even if you are a member user, connection admin status gives you full access to assets from that connection.
Any user with connection admin status will not see the lock icon for their assets. An explicit access policy can override a connection admin's default full access.
Access policies
Access policies often supersede the default permissions associated with connection admins and user roles. Access policies either allow or restrict access to certain assets.
For example, even as a member user, you can add tags and terms to an asset if you are part of a persona with a metadata policy that allows this action. Guest users in Atlan can only suggest changes to asset metadata if enabled from the admin center.
Access policies can also give users full access to certain assets without making them connection admins.
User roles
Although there are default permissions associated with each user role (admin, member, and guest), access to assets depends entirely on whether the user is a connection admin or part of a persona or purpose.
For example, a member user who is neither a connection admin nor part of any persona or purpose will see every asset in Atlan with a lock icon.