Defining Permissions
You need to set up Permissions to define which types of resources your Targets will be allowed or denied access to.
The resources available to grant permission depend on the Target you select, and the rules available depend on the resource selected. For more information, see Defining Targets.
Adding resources and how rules are applied
You can add as many resources as needed. An OR operation is applied between permissions: as you add more permissions, more resources will be included in the verification process.
Denial permissions will override any permissions granting access to the same resource.
SQL Queries
The SQL Query resource grants actions on TagoSQL stored queries. Run user Targets can be granted Access (list and view queries) and Execute (run them); analysis Targets can additionally be granted Create, Edit, and Delete. A rule can match any query, a specific query by id, or queries by tag; Create matches the tags the new query carries. Granting execution of a query grants its full result set: the query runs with the profile's data access, and the policy does not filter rows or columns. The full model is on the TagoSQL Access Management page.