Data spaces in Superset

To configure the data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. model of the platform in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards., users are assigned data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it.-specific roles in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards.. This ensures that data access and manipulation are tightly controlled through role-based permissions, allowing users to interact only with the data and visualizations relevant to data spacesData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. they have access to.

Apache SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. manages access to data visualizations, dashboards, and data sources using Roles, Users, Permissions, Data sources, and Dashboards. In the platform, each Data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. represents a thematic area containing specific data and visualizations. In SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards., this concept is implemented by creating roles and permissions that control access to resources (such as dashboards and charts) within a data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it..

How the Platform's Data space Concept Maps to Superset

• User: A person or system entity that accesses SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. to view or manage dashboards and data sources. Users are assigned roles that define what actions they can perform within a data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it..
• Role: A collection of permissions in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. that defines what a user can do within a specific data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it.. For example, a role might allow a user to view, edit, or manage dashboards and data sources within a certain thematic area (data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it.).
• Permission: A specific right or authorization to perform actions such as viewing, editing, or deleting resources in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards.. Permissions can be configured for specific data sources or dashboards, allowing fine-grained control over what users can do.
• Data source: A collection of data (e.g., tables, databases, or datasets) that users access to create visualizations and dashboards. Data sources are part of a data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. and define the scope of the data available for that data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it..
• Dashboard: A visual representation of data from a specific data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it.. Dashboards allow users to explore, analyze, and interact with data from the associated data sources. In SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards., Roles and Permissions are used to manage user access to data sources and dashboards. For each Data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it., we implement a custom set of roles and permissions to enforce the platform’s data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. concept. This ensures that users are given access only to the specific resources within a data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. that they are allowed to interact with.

Example for Keycloak and Superset

The following settings describe the data spacesData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. named "baumkataster" and "denkmalschutz" defined in KeycloakKeycloakThe component that manages access to data spaces across all platform components. It uses realms, clients, roles, users, and groups, and represents each data space through specific roles. and SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards.:

• KeycloakKeycloakThe component that manages access to data spaces across all platform components. It uses realms, clients, roles, users, and groups, and represents each data space through specific roles. "Groups":
  • Group for data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. "baumkataster": baumkataster
  • Group for data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. "denkmalschutz": denkmalschutz
  • N.B.: When creating a group, two key-value pairs must be assigned as attributes, namely "service":"true" and "tenant":"true"
• KeycloakKeycloakThe component that manages access to data spaces across all platform components. It uses realms, clients, roles, users, and groups, and represents each data space through specific roles. user "Max Mustermann" (max@mustermann.de)
  • User-Group-Assignments: baumkataster, denkmalschutz
• SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. roles: baumkataster, denkmalschutz

If Max requests a resource from SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. and therefore logs into SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. (via the KeycloakKeycloakThe component that manages access to data spaces across all platform components. It uses realms, clients, roles, users, and groups, and represents each data space through specific roles.),

• KeycloakKeycloakThe component that manages access to data spaces across all platform components. It uses realms, clients, roles, users, and groups, and represents each data space through specific roles. sends an access_token: (user: max@mustermann.de, groups: [baumkataster, denkmalschutz])
• SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. creates a User: max@mustermann.de (if not already existing)
• Based on the groups, the user is assigned the corresponding roles in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards. (baumkataster, denkmalschutz)
• Permissions are manually assigned to roles in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards.

Mapping illustrated

The mapping is illustrated in the following image, using matching colors for corresponding objects.

Setting Up Data spaces in Superset

To configure the platform’s data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it. concept in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards., assign permissions to each data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it.'s role. Roles must have specific permissions to allow actions on resources (like dashboards or data sources). Permissions may vary depending on the role and the data spaceData spaceA thematic area that contains specific data and resources in different platform components. Data is stored in exactly one data space, and access rights are specific to each data space. Roles within a data space control what users and groups can do in it..

For detailed instructions on how to configure roles, define permissions, and assign them to users in SupersetSupersetApache Superset, the component for data visualizations and dashboards. Roles and permissions per data space control access to its data sources and dashboards., refer to the Admin Guide.