User Roles

DataHive users are tied to roles that allow them to perform different key actions according to their specific responsibilities. These actions are detailed below from the perspective of a Data Providing Agency (DPA) or a Data Consuming Agency (DCA). A DataHive Tenant is normally a DPA who publishes and shares data directly on DataHive (e.g. a Trusted Centre operates as a Tenant managing Core Data, or an Agency might self-publishes and distributes their own dataset).

Role Overview​

Role	Description	Key Actions	DPA	DCA
All Users	Login and request for data.	Search and discover datasets		☑
		Submit and amend data requests		☑
		Access datasets		☑
		Create visualizations		☑
Chief Data Officer (CDO)	Oversees data governance for an agency.	Add / remove CDO Team members	☑	☑
		Change CDO Team member role assignments	☑	☑
		Oversee outgoing agency data requests		☑
		Create / update tenants	☑
		Add / remove Internal Approver(s) for agency *		☑
		Re-assign Internal Approver of outgoing agency data requests		☑
CDO Team Manager	Assists with data governance for an agency.	Add / remove CDO Team members	☑	☑
		Assign / unassign CDO Team member roles	☑	☑
		Oversee outgoing agency data requests		☑
		Create / update tenants	☑
		Add / remove Internal Approver(s) for agency		☑
		Re-assign Internal Approver of outgoing agency data requests		☑
CDO Team Member	Assists with data governance for an agency.	Oversee outgoing agency data requests		☑
		Create / update tenants	☑
Internal Approver	Approves or rejects outgoing data requests and access.	Approve/reject outgoing data requests		☑
		Edit data request team access		☑
		Change data request owner		☑
		Accept / reject Internal Approver re-assignment requests		☑
Tenant Manager	Oversees tenant-wide activities and users in the tenant.	Onboard datasets	☑
		Assign Tenant Admins to datasets	☑
		Add / remove tenant members	☑
		Change tenant member role assignments	☑
		Approve or reject fast-tracked datafields of incoming data requests	☑
		Approve or reject dataset un-publishing	☑
		Approve or reject dataset deletion	☑
		Restore deleted datasets	☑
		Approve or reject tenant connections	☑
Tenant Admin	Manages datasets and verify incoming data requests.	Upload datasets	☑
		Publish dataset	☑
		Verify and fulfil incoming data requests	☑
		Un-publish dataset (subject to approval)	☑
		Delete datasets (subject to approval)	☑
		Assign datasets to service principal accounts	☑
Source Agency (with approval rights)	A Source Agency (SSOT) with approval rights. Reviews and approves non-fast-tracked datafields for their own dataset(s).	Approve or reject non-fast-tracked datafields of incoming data requests (own dataset(s) only)	☑
Platform Admin	Manages platform-wide roles and tenants.	Manage tenants and CDO lists
		Create and administer platform users
		Purge datasets

Relationship between User Roles​

The user roles and their relationships are illustrated in the diagram below:

Note: The Tenant Manager and Tenant Admin roles must be assigned to separate individuals.

Role Permissions Matrix​

By default, all users will be able to

• Submit Data Requests
• Access Datasets (upon DR fulfilment)
• Amend Data Requests

The following tables summarise the role permissions for specific functions:

Data Request Approval​

Feature	Internal Approver	Tenant Admin	Tenant Manager	Source Agency (SSOT) (with approval rights)
Verify data request		✅
Approve/Reject data requests	✅
Approve/Reject data requests with fast-tracked fields			✅
Approve/Reject data requests with non-fast-tracked fields (scoped to their own dataset(s))				✅

Dataset Management​

Feature	Tenant Admin	Tenant Manager
Onboard dataset		✅
Upload dataset files	✅
Share dataset via Snowflake Private Listing	✅
Edit and Publish dataset metadata	✅
Assign Tenant Admins		✅
Manage Tenant Users		✅
Create/fulfill dataset changelog	✅
Un-publish datasets	✅
Approve/reject dataset un-publishing		✅
Delete datasets	✅
Approve/reject dataset deletion		✅
Restore datasets		✅

CDO Team Management​

Feature	Chief Data Officer (CDO)	CDO Team Manager	CDO Team Member
Manage CDO Team	✅	✅
Create/Manage Tenants	✅	✅	✅
Manage Internal Approver(s) for Agency	✅	✅
Re-assign Internal Approver of Data Request(s) for Agency	✅	✅