--- alias: user-guide-data-set-security-permissions tags: - data platform description: "This document outlines data set security permissions based on entity type and object-level settings" --- # Data Sets Security Permissions ## Overview The **Data Sets** (as well as, Analytics Views and IoT Events Definitions) are protected by the object security level. For more information, see [[security-admin#security-levels|Security Levels]]. ## Object-Level Behavior in Data Sets {% include-markdown 'includes/pages/security_permissions_data_platform.md' %} ## Detailed Permissions Matrix The table below summarizes all possible permission combinations for Data Sets, based on whether the entity is System or Non-System, and whether object-level security is On or Off. | Entity Type | Object-Level | Action | Administrator | User (No Data Group) | User (Read Access) | User (Write Access) | Access Notes | | -------------- | ------------ | ---------------------------- | ------------- | -------------------- | ------------------ | ------------------- | ---------------------------------------------------------- | | **System** | **Off** | Edit | :material-close:{ style="color: #EF5350" } | :material-close:{ style="color: #EF5350" } | :material-close:{ style="color: #EF5350" } | :material-close:{ style="color: #EF5350" } | System entities cannot be edited when Object-Level is off. | | **System** | **Off** | Import | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **System** | **Off** | Import via Integration Entry | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **Non-System** | **Off** | Edit | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **Non-System** | **Off** | Edit Query / Fields | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **Non-System** | **Off** | Import | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **System** | **On** | Edit | :material-check:{ style="color: #4DB6AC" } | :material-alert:{ style="color: #FFB300" } Forbidden query and fields | :material-close:{ style="color: #EF5350" } | :material-alert:{ style="color: #FFB300" } Forbidden query and fields | Users with Write Access or no Data Group can edit only partial fields or queries. | | **System** | **On** | View | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Full viewing access. Users with no access cannot view. | | **System** | **On** | Terminate | :material-close:{ style="color: #EF5350" } | :material-close:{ style="color: #EF5350" } | :material-close:{ style="color: #EF5350" } | :material-close:{ style="color: #EF5350" } | Termination not allowed. | | **System** | **On** | Import | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **System** | **On** | Import via Integration Entry | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **Non-System** | **On** | Edit | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-close:{ style="color: #EF5350" } | :material-check:{ style="color: #4DB6AC" } | Allowed except for Read Access users. | | **Non-System** | **On** | View | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **Non-System** | **On** | Terminate | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | | **Non-System** | **On** | Import | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | :material-check:{ style="color: #4DB6AC" } | Allowed. | Table: Data Sets permissions matrix !!! info On the Details page of each Data Set, the Owner Type property indicates whether the event is a System or Non-System Data Set.