[{"data":1,"prerenderedAt":534},["ShallowReactive",2],{"docs-\u002Fdocs\u002Fadministration\u002Fpeople-and-roles":3},{"page":4,"navigation":449,"surround":531},{"_path":5,"_dir":6,"_draft":7,"_partial":7,"_locale":8,"title":9,"description":10,"body":11,"_type":443,"_id":444,"_source":445,"_file":446,"_stem":447,"_extension":448},"\u002Fdocs\u002Fadministration\u002Fpeople-and-roles","administration",false,"","People and roles","How people join your organization, the organization and workspace roles, and private workspaces.",{"type":12,"children":13,"toc":431},"root",[14,44,51,127,133,200,218,225,254,260,272,342,353,359,364,408,413,419],{"type":15,"tag":16,"props":17,"children":18},"element","p",{},[19,22,28,30,35,37,42],{"type":20,"value":21},"text","Access is set at two levels: your ",{"type":15,"tag":23,"props":24,"children":25},"strong",{},[26],{"type":20,"value":27},"organization",{"type":20,"value":29}," (who's in the company account and who administers it) and each ",{"type":15,"tag":23,"props":31,"children":32},{},[33],{"type":20,"value":34},"workspace",{"type":20,"value":36}," (who can see and change its data). Manage both under ",{"type":15,"tag":23,"props":38,"children":39},{},[40],{"type":20,"value":41},"Settings",{"type":20,"value":43},".",{"type":15,"tag":45,"props":46,"children":48},"h2",{"id":47},"organization-roles",[49],{"type":20,"value":50},"Organization roles",{"type":15,"tag":52,"props":53,"children":54},"table",{},[55,74],{"type":15,"tag":56,"props":57,"children":58},"thead",{},[59],{"type":15,"tag":60,"props":61,"children":62},"tr",{},[63,69],{"type":15,"tag":64,"props":65,"children":66},"th",{},[67],{"type":20,"value":68},"Role",{"type":15,"tag":64,"props":70,"children":71},{},[72],{"type":20,"value":73},"Can",{"type":15,"tag":75,"props":76,"children":77},"tbody",{},[78,95,111],{"type":15,"tag":60,"props":79,"children":80},{},[81,90],{"type":15,"tag":82,"props":83,"children":84},"td",{},[85],{"type":15,"tag":23,"props":86,"children":87},{},[88],{"type":20,"value":89},"Member",{"type":15,"tag":82,"props":91,"children":92},{},[93],{"type":20,"value":94},"Use the workspaces they have access to",{"type":15,"tag":60,"props":96,"children":97},{},[98,106],{"type":15,"tag":82,"props":99,"children":100},{},[101],{"type":15,"tag":23,"props":102,"children":103},{},[104],{"type":20,"value":105},"Admin",{"type":15,"tag":82,"props":107,"children":108},{},[109],{"type":20,"value":110},"Also invite people, manage workspaces and access, and see query activity and usage",{"type":15,"tag":60,"props":112,"children":113},{},[114,122],{"type":15,"tag":82,"props":115,"children":116},{},[117],{"type":15,"tag":23,"props":118,"children":119},{},[120],{"type":20,"value":121},"Owner",{"type":15,"tag":82,"props":123,"children":124},{},[125],{"type":20,"value":126},"Also make or remove owners, and change sign-in and SSO settings",{"type":15,"tag":45,"props":128,"children":130},{"id":129},"workspace-roles",[131],{"type":20,"value":132},"Workspace roles",{"type":15,"tag":52,"props":134,"children":135},{},[136,150],{"type":15,"tag":56,"props":137,"children":138},{},[139],{"type":15,"tag":60,"props":140,"children":141},{},[142,146],{"type":15,"tag":64,"props":143,"children":144},{},[145],{"type":20,"value":68},{"type":15,"tag":64,"props":147,"children":148},{},[149],{"type":20,"value":73},{"type":15,"tag":75,"props":151,"children":152},{},[153,169,185],{"type":15,"tag":60,"props":154,"children":155},{},[156,164],{"type":15,"tag":82,"props":157,"children":158},{},[159],{"type":15,"tag":23,"props":160,"children":161},{},[162],{"type":20,"value":163},"Viewer",{"type":15,"tag":82,"props":165,"children":166},{},[167],{"type":20,"value":168},"Run queries, ask questions, and use models and published tabs",{"type":15,"tag":60,"props":170,"children":171},{},[172,180],{"type":15,"tag":82,"props":173,"children":174},{},[175],{"type":15,"tag":23,"props":176,"children":177},{},[178],{"type":20,"value":179},"Editor",{"type":15,"tag":82,"props":181,"children":182},{},[183],{"type":20,"value":184},"Also manage connections, sync settings and models",{"type":15,"tag":60,"props":186,"children":187},{},[188,195],{"type":15,"tag":82,"props":189,"children":190},{},[191],{"type":15,"tag":23,"props":192,"children":193},{},[194],{"type":20,"value":105},{"type":15,"tag":82,"props":196,"children":197},{},[198],{"type":20,"value":199},"Also manage who has access to the workspace, and delete connections",{"type":15,"tag":16,"props":201,"children":202},{},[203,205,210,212,217],{"type":20,"value":204},"To give someone access, open ",{"type":15,"tag":23,"props":206,"children":207},{},[208],{"type":20,"value":209},"Settings → Workspace access",{"type":20,"value":211}," and choose ",{"type":15,"tag":23,"props":213,"children":214},{},[215],{"type":20,"value":216},"Add someone",{"type":20,"value":43},{"type":15,"tag":219,"props":220,"children":222},"h3",{"id":221},"shared-and-private-workspaces",[223],{"type":20,"value":224},"Shared and private workspaces",{"type":15,"tag":226,"props":227,"children":228},"ul",{},[229,242],{"type":15,"tag":230,"props":231,"children":232},"li",{},[233,235,240],{"type":20,"value":234},"In a ",{"type":15,"tag":23,"props":236,"children":237},{},[238],{"type":20,"value":239},"shared",{"type":20,"value":241}," workspace, every member of the organization is at least a viewer, and organization owners and admins are workspace admins.",{"type":15,"tag":230,"props":243,"children":244},{},[245,247,252],{"type":20,"value":246},"A ",{"type":15,"tag":23,"props":248,"children":249},{},[250],{"type":20,"value":251},"private",{"type":20,"value":253}," workspace is only open to people granted access explicitly. Organization admins can see that it exists and can delete it, but they can't read its data unless they've been granted access.",{"type":15,"tag":45,"props":255,"children":257},{"id":256},"joining-an-organization",[258],{"type":20,"value":259},"Joining an organization",{"type":15,"tag":16,"props":261,"children":262},{},[263,265,270],{"type":20,"value":264},"Under ",{"type":15,"tag":23,"props":266,"children":267},{},[268],{"type":20,"value":269},"Settings → Domains & SSO",{"type":20,"value":271},", choose how people join:",{"type":15,"tag":52,"props":273,"children":274},{},[275,291],{"type":15,"tag":56,"props":276,"children":277},{},[278],{"type":15,"tag":60,"props":279,"children":280},{},[281,286],{"type":15,"tag":64,"props":282,"children":283},{},[284],{"type":20,"value":285},"Policy",{"type":15,"tag":64,"props":287,"children":288},{},[289],{"type":20,"value":290},"What happens",{"type":15,"tag":75,"props":292,"children":293},{},[294,310,326],{"type":15,"tag":60,"props":295,"children":296},{},[297,305],{"type":15,"tag":82,"props":298,"children":299},{},[300],{"type":15,"tag":23,"props":301,"children":302},{},[303],{"type":20,"value":304},"Anyone with a verified company domain joins automatically",{"type":15,"tag":82,"props":306,"children":307},{},[308],{"type":20,"value":309},"The default. Someone who signs up with an address at your domain joins your organization.",{"type":15,"tag":60,"props":311,"children":312},{},[313,321],{"type":15,"tag":82,"props":314,"children":315},{},[316],{"type":15,"tag":23,"props":317,"children":318},{},[319],{"type":20,"value":320},"Verified domain, but an admin must approve",{"type":15,"tag":82,"props":322,"children":323},{},[324],{"type":20,"value":325},"They can request to join, and an admin approves them.",{"type":15,"tag":60,"props":327,"children":328},{},[329,337],{"type":15,"tag":82,"props":330,"children":331},{},[332],{"type":15,"tag":23,"props":333,"children":334},{},[335],{"type":20,"value":336},"Invitation only",{"type":15,"tag":82,"props":338,"children":339},{},[340],{"type":20,"value":341},"Only people who've been invited can join.",{"type":15,"tag":16,"props":343,"children":344},{},[345,347,351],{"type":20,"value":346},"People who join automatically are given the ",{"type":15,"tag":23,"props":348,"children":349},{},[350],{"type":20,"value":179},{"type":20,"value":352}," role in the default workspace.",{"type":15,"tag":219,"props":354,"children":356},{"id":355},"verifying-your-domain",[357],{"type":20,"value":358},"Verifying your domain",{"type":15,"tag":16,"props":360,"children":361},{},[362],{"type":20,"value":363},"A domain only routes people into your organization once you've proved you own it. Datachef gives you a DNS TXT record to add:",{"type":15,"tag":52,"props":365,"children":366},{},[367,383],{"type":15,"tag":56,"props":368,"children":369},{},[370],{"type":15,"tag":60,"props":371,"children":372},{},[373,378],{"type":15,"tag":64,"props":374,"children":375},{},[376],{"type":20,"value":377},"Name",{"type":15,"tag":64,"props":379,"children":380},{},[381],{"type":20,"value":382},"Value",{"type":15,"tag":75,"props":384,"children":385},{},[386],{"type":15,"tag":60,"props":387,"children":388},{},[389,399],{"type":15,"tag":82,"props":390,"children":391},{},[392],{"type":15,"tag":393,"props":394,"children":396},"code",{"className":395},[],[397],{"type":20,"value":398},"_datachef.\u003Cyour domain>",{"type":15,"tag":82,"props":400,"children":401},{},[402],{"type":15,"tag":393,"props":403,"children":405},{"className":404},[],[406],{"type":20,"value":407},"datachef-verification=\u003Ctoken>",{"type":15,"tag":16,"props":409,"children":410},{},[411],{"type":20,"value":412},"Until the domain is verified, signing up with an address at that domain doesn't put anyone in your organization. Public email domains such as gmail.com never route anyone anywhere.",{"type":15,"tag":45,"props":414,"children":416},{"id":415},"invitations",[417],{"type":20,"value":418},"Invitations",{"type":15,"tag":16,"props":420,"children":421},{},[422,424,429],{"type":20,"value":423},"Owners and admins can invite anyone, including contractors with addresses outside your domain, from ",{"type":15,"tag":23,"props":425,"children":426},{},[427],{"type":20,"value":428},"Settings → People",{"type":20,"value":430},". An invitation gives a role of Member or Admin (or Owner, when an owner sends it) and expires after 14 days.",{"title":8,"searchDepth":432,"depth":432,"links":433},2,[434,435,439,442],{"id":47,"depth":432,"text":50},{"id":129,"depth":432,"text":132,"children":436},[437],{"id":221,"depth":438,"text":224},3,{"id":256,"depth":432,"text":259,"children":440},[441],{"id":355,"depth":438,"text":358},{"id":415,"depth":432,"text":418},"markdown","content:docs:6.administration:1.people-and-roles.md","content","docs\u002F6.administration\u002F1.people-and-roles.md","docs\u002F6.administration\u002F1.people-and-roles","md",[450],{"title":451,"_path":452,"children":453},"Welcome","\u002Fdocs",[454,455,465,487,503,510,520],{"title":451,"_path":452},{"title":456,"_path":457,"children":458},"Getting started","\u002Fdocs\u002Fgetting-started",[459,462],{"title":460,"_path":461},"Quickstart","\u002Fdocs\u002Fgetting-started\u002Fquickstart",{"title":463,"_path":464},"Key concepts","\u002Fdocs\u002Fgetting-started\u002Fconcepts",{"title":466,"_path":467,"children":468},"Connecting data","\u002Fdocs\u002Fconnections",[469,472,475,478,481,484],{"title":470,"_path":471},"Overview","\u002Fdocs\u002Fconnections\u002Foverview",{"title":473,"_path":474},"Sync settings","\u002Fdocs\u002Fconnections\u002Fsync-settings",{"title":476,"_path":477},"Salesforce","\u002Fdocs\u002Fconnections\u002Fsalesforce",{"title":479,"_path":480},"Marketo","\u002Fdocs\u002Fconnections\u002Fmarketo",{"title":482,"_path":483},"Google Analytics 4","\u002Fdocs\u002Fconnections\u002Fgoogle-analytics-4",{"title":485,"_path":486},"PostgreSQL and MySQL","\u002Fdocs\u002Fconnections\u002Fpostgres-mysql",{"title":488,"_path":489,"children":490},"Analysis","\u002Fdocs\u002Fanalysis",[491,494,497,500],{"title":492,"_path":493},"Asking questions","\u002Fdocs\u002Fanalysis\u002Fask-a-question",{"title":495,"_path":496},"SQL editor","\u002Fdocs\u002Fanalysis\u002Fsql-editor",{"title":498,"_path":499},"Charts","\u002Fdocs\u002Fanalysis\u002Fcharts",{"title":501,"_path":502},"Tabs and sharing","\u002Fdocs\u002Fanalysis\u002Ftabs-and-sharing",{"title":504,"_path":505,"children":506},"Models","\u002Fdocs\u002Fmodels",[507],{"title":508,"_path":509},"Working with models","\u002Fdocs\u002Fmodels\u002Foverview",{"title":511,"_path":512,"children":513},"AI agents","\u002Fdocs\u002Fai-agents",[514,517],{"title":515,"_path":516},"Claude connector","\u002Fdocs\u002Fai-agents\u002Fclaude-connector",{"title":518,"_path":519},"Tools","\u002Fdocs\u002Fai-agents\u002Ftools",{"title":521,"_path":522,"children":523},"Administration","\u002Fdocs\u002Fadministration",[524,525,528],{"title":9,"_path":5},{"title":526,"_path":527},"Sign-in and SSO","\u002Fdocs\u002Fadministration\u002Fsign-in-and-sso",{"title":529,"_path":530},"Security","\u002Fdocs\u002Fadministration\u002Fsecurity",[532,533],{"_path":519,"title":518},{"_path":527,"title":526},1792546943449]