Roles in the Tetra Data Platform (TDP) help you securely control access to which parts of the TDP users can access. By assigning TDP users and groups either preconfigured or custom roles that have specific Policies attached to them, you can grant granular permissions based on common user personas and the Functionality access each requires.

Users can be assigned either View Access or Full Access to each platform functionality.

To create and assign custom roles, see Create Custom Roles. To assign preconfigured roles, see Edit a User Role.

📘

NOTE

For more information and best practices, see Platform Administration in the TetraConnect Hub. To request access, see Access the TetraConnect Hub.

Preconfigured Roles

Each TDP deployment includes three preconfigured roles:

• Administrator
• Member
• Read Only

By default, each preconfigured role is assigned one or more Policies based on common TDP user personas and the Functionality access each requires.

To assign preconfigured roles, see Edit a User Role.

📘

NOTE

Customer hosted TDP deployments also include a ts-admin role. The ts-admin role provides the same permissions as the Org Admin role, along with additional permissions for creating and managing organizations. As part of standard platform support and maintenance agreements, TetraScience Customers Success and Support Engineers are granted access to the platform as a Read-Only user by default.

Administrator Role Permissions

Assigned policies: Organization Admin and Tenant Admin

Member Role Permissions

Assigned policies: Member

Read Only Role Permissions

Assigned policies: Support

Custom Roles

Custom roles are configured through a combination of Policies based on common TDP user personas and the Functionality access each requires. Organization administrators can create or edit roles assigned one or more Policies to make sure that functionality access is limited to only what is necessary for each user’s role through both the TDP user interface and TetraScience API.

To create and assign custom roles, see Create Custom Roles and Edit a User Role.

Policies

You can assign one or more of the following policies to any custom role in the TDP:

• Developer
• Data User
• Data Owner
• Auditor
• Analyst
• Tenant Admin
• Organization Admin
• Member
• Support

Developer Policy Permissions

📘

NOTE

The Developer role doesn't have the permissions required to install Tetra Integrations locally, which requires either a preconfigured Administrator role or a custom role with Tenant Admin policy permissions.

Data User Policy Permissions

Data Owner Policy Permissions

Auditor Policy Permissions

Analyst Policy Permissions

Tenant Admin Policy Permissions

Organization Admin Policy Permissions

Member Policy Permissions

Support Policy Permissions

Functionalities

Each policy's Functionality permissions map to the following features within the TDP: