Data Model Authorizations

Data Model Authorizations control which users and groups can access each data model in SEI, and what they can do with it. For each authorization, you define a Data Model Role, a Display Level, and an Edit Level. These default to the values configured on the user or group, but can be overridden here at the data model level.

Authorizations can be managed from three angles using the Manage dropdown at the top of the page. Choose whether to start from a data model, a group, or a user. The page layout changes depending on your selection.

Access the page by going to the Administration section in SEI. Expand the Security tab, and click Data Model Authorizations.

tip

Configure data model authorizations at the group level rather than the user level whenever possible. Managing access through groups is easier to maintain and less prone to inconsistencies.

When to use data model authorizations

• Restrict access to sensitive data so only the right teams or individuals can open a specific data model.
• Apply different permission levels by controlling what each group or user can view or edit within a data model.
• Override default permissions when a specific data model requires tighter or broader access than what the group or user defaults provide.

Manage authorizations

The Manage dropdown to select what you want to configure: a data model, a group, or a user. The page adjusts based on your selection.

Data Models

Data Models

Start from a data model to see and manage which groups and users have access to it. The top list shows all available data models. Selecting one loads the Groups and Users panels below, each paired with their authorized counterpart.

To authorize a group

1. In the Manage dropdown, select Data Models.
2. Select the data model from the top list.
3. In the Groups panel, select the group to authorize.
4. Select the > arrow to move it to Authorized Groups.
5. In Authorized Groups, set the Data Model Role, Authorization Display Level, and Authorization Edit Level for that group.
6. Click Apply Changes.

To authorize a user

1. In the Users panel, select the user to authorize.
2. Select the > arrow to move them to Authorized Users.
3. In Authorized Users, set the Data Model Role, Authorization Display Level, and Authorization Edit Level for that user.
4. Click Apply Changes.

To remove an authorization, select the entry in the Authorized Groups or Authorized Users panel and select the < arrow to move it back.

Groups

Groups

Start from a group to manage which data models it can access. The top list shows all groups. Selecting one loads the Data Models panel and the Authorized Data Models panel, which shows the data models the group already has access to.

1. In the Manage dropdown, select Groups.
2. Select the group from the top list.
3. In the Data Models panel, select the data model to authorize.
4. Select the > arrow to move it to Authorized Data Models.
5. In Authorized Data Models, set the Data Model Role, Authorization Display Level, and Authorization Edit Level.
6. Click Apply Changes.

To remove an authorization, select the data model in Authorized Data Models and select the < arrow to move it back.

Users

Users

Start from a user to manage their individual data model access. The top list shows all users with their current General Role, Display Level, and Edit Level. Selecting a user loads the Data Models panel and the Authorized Data Models panel showing what they already have access to.

1. In the Manage dropdown, select Users.
2. Select the user from the top list.
3. In the Data Models panel, select the data model to authorize.
4. Select the > arrow to move it to Authorized Data Models.
5. In Authorized Data Models, set the Data Model Role, Authorization Display Level, and Authorization Edit Level.
6. Click Apply Changes.

To remove an authorization, select the data model in Authorized Data Models and select the < arrow to move it back.

tip

Select the ⓘ icon next to any data model to see its Data Model ID, who created it, and its navigation panel path.

Authorization fields

When you move a group or user into an authorized panel, three fields appear for that entry. These control what the group or user can do with the data model.

Field	What it controls
Data Model Role	The set of actions the group or user can perform on this data model, such as creating worksheets, printing, or exporting. Roles are created and defined in the Roles tab.
Authorization Display Level	The highest column authorization level the group or user can see in this data model. Columns with a higher level than this value are hidden.
Authorization Edit Level	The highest column authorization level the group or user can edit in this data model. Columns above this level appear as read-only.

ExampleHow permissions combine when a user belongs to multiple groups#

Scenario

When a user belongs to more than one group, and all those groups are authorized to the same data model, their permissions are resolved automatically. Display and edit levels take the highest value from any group, and roles are combined.

Details

• Group A has a Display Level of 20 and the Print role.
• Group B has a Display Level of 40 and the Create New Worksheet role.

A user who belongs to both groups ends up with a display level of 40 and can Print and Create New Worksheet.

Keep in mind

This applies only when multiple groups are authorized to the same data model.