Resource Sharing
Resource Sharing enables user to grant access for Amorphic features, resources, and functions to other Amorphic users. This documentation outlines how resource sharing works for all Amorphic features.
Each resource will have a share icon and clicking the icon would open a panel with the following sections:-
Users
This section shows the list of users along with their corresponding access-type authorized to perform operations on the resource. Users with editor access or owner access can provide resource access to other users or tags in the system.
Tags
This tab shows the list of tags authorized to perform operations on that resource. A tag is a resource made up of a key-value pair, designed to efficiently share and manage Amorphic resources. Tags are created by going to Data Management And Governance -> User Access Tags -> Create Access Tag Read more about tags here
Access Types
There are three type of access types:
| Access Type | Description |
|---|---|
| Owner | Users or tags with owner access have full control over the resource, including managing the resource. |
| Editor | User or tags with editor access have the permission to edit the metadata of resources if applicable and can also perform any operations like run, stop, start etc except resource deletion. |
| Read Only | User or tags has limited (read only) permission to the particular resource, i.e. view the details and would not be able to perform other actions on it. |
Access Source
For datasets only, the Who has Access list carries an Access Source column alongside the access type, showing where each access came from:
| Access Source | Meaning |
|---|---|
| Direct | Granted on the dataset itself. |
| DLA | Inherited from Dataset Level Access on the domain the dataset belongs to. |
| Filter | Granted through a data filter on a Lake Formation dataset. |
When a user or tag holds the same access on a dataset both through the domain and directly on the dataset, the source is shown as Direct.
How to Grant Access to a Resource for Users/Tags?
To provide resource access to users/tags, follow these steps:
- Select the resource that user wants to share and click on the share icon.
- A side panel will open, here user can list users and tags that have access to the resource along with the access type.
- Provide the required details and click "Share".
- Provide Access To: Here user needs to search and choose users/tags that user wants to grant access to.
- Access Type: Select the required access type.
Tags can only be shared with users, sharing between tags is not allowed.
How to Share Multiple Resources with Multiple Users and Tags in a Single Action?
Multi-resource sharing allows Users to share multiple resources with multiple user-tags and custom-tags in a single action. It simplifies bulk operations and improves productivity by eliminating the need to share resources individually.
Feature availability
Multi-resource sharing is available on the Resource Listing page for all resource types.
Key capabilities
- Bulk selection: Users can select multiple resources at once.
- Tag-based sharing: Users can assign multiple user-tags and custom-tags while sharing resources.
- Single action: Users perform sharing for all selected resources in one step.
How to Change the Access Type?
Access does not have to be revoked and granted again to change it. In the Who has Access list, open the Access Type dropdown on the row and pick the new access type. The change takes effect straight away.
Switching also covers anything that sits under the resource. Changing the access on a domain updates the access on the datasets in that domain at the same time, so each dataset no longer has to be revoked and shared again by hand.
Access that reaches a dataset through the domain is managed on the domain. On the dataset, it is listed with DLA as the access source.
How to Revoke Access to a Resource for a User/Tag?
To remove resource access from a user/tag, follow these steps:
- Select the resource that user wants to revoke the access and click on the share icon.
- A side panel will open, here user can list users and tags that have access to the resource along with the access type.
- Open the Access Type dropdown on the right side of that user/tag and select Remove to revoke the access.
Every resource must keep at least one owner with direct access, so the last remaining direct owner cannot be removed.
A user or tag can hold only one access type on a resource at a time.
User can select upto 20 users/tags at a time.