Managing workspaces and access control

DagKnows enables you to create multiple workspaces. Think of a workspace like a project. In a typical enterprise, you may have multiple teams who want isolation of their runbooks. Workspace is the way to handle it. You can create multiple workspaces, one for each team, and assign permissions to users so they can do various things on those workspaces. Please refer to the following figure:

It shows an example where

• We have three users: userA, userB, userC
• We have two workspaces: workspaceABC and workspaceXYZ
• userA has role1 on workspaceABC and role2 on workspaceXYZ
• userB has role1 on workspaceABC and no role on workspaceXYZ
• userC has role3 on workspaceXYZ and no role on workspace ABC
• So we have three roles. The privileges associated with a role can be defined using a matrix as shown in the figure.

Thus, you can control the privileges at the finest granularity for users by defining your own custom roles and assigning them to users. Please take a look at the various privileges in the first column. We have privileges regarding tasks such as viewing, editing, deleting code, input/output, etc. Likewise, we have privileges regarding jobs. When you execute a task, it creates a job. You you can control who can stop a job that's already started as well as view, delete job results. Note that the privilege to "start" a job is with a task as task.execute but privilege to stop a job is with jobs.

Next we can see how to create workspace and how to create custom roles and assign the roles to users.