Manage access controls

Access Control for individual Persistent Queries can be handled in the Query Monitor from Deephaven on the web (see: Permissions. However, the ACL Editor in Deephaven Classic allows you to create new users, control the privileges of these users, and to assign user groups.

ACL Editor

Deephaven enables fine-grained access control to data, queries and reports. This is accomplished through the individual authorization of users and groups, access control lists (ACLs) and account information.

Authorized users can edit the access settings and permissions in the ACL Editor tool, which can be found in the Advanced menu in Deephaven Classic:

Below, we'll cover the basics of adding users and assigning permissions levels. It's possible to set extremely fine grained permissions, such as limited access to specific tables or even rows within a table. For full details, please see the Permissions section of the System Administration Guide.

Manage Users

The left side of the ACL Editor panel controls individual Deephaven users. Here, you can add new users, delete users, and change passwords as needed.

Manage Groups

The right side of the ACL Editor panel shows the Group Administration options. Once a user is added to the system, you can add them to specific groups that determine their level of permissions.

In the case above, newUser3 is being added to the deephaven-queryviewonly group. Let's say that you want to share limited views of your data such as curated Deephaven Dashboards on the web, but you want to keep your queries private. Members of the view-only group are not allowed to create or edit queries, and can only view the specific persistent queries that denote them as a viewer. On the other side of the spectrum, superusers have full access to queries, permissions, schemas, etc.

You can see to which group(s) a user belongs in the table at the bottom of the panel.