Defining Permissions
You need to set up Permissions to define which types of resources your Targets will be allowed or denied access to.
The resources available to grant permission depend on the Target you select, and the rules available depend on the resource selected. For more information, see Defining Targets.
Adding resources and how rules are applied
You can add as many resources as needed. An OR operation is applied between permissions: as you add more permissions, more resources will be included in the verification process.
Denial permissions will override any permissions granting access to the same resource.
SQL Queries
The SQL Query resource grants actions on TagoSQL stored queries. Run user Targets can be granted Access (list and view queries) and Execute (run them); analysis Targets can additionally be granted Create, Edit, and Delete.
Granting execution of a query grants its full result set. The policy decides which queries a caller may run, never which rows or columns come back.
To scope what each Run user sees within a single query, see Session Context.