Skip to main content
Validio Role-Based Access Control (RBAC) provides granular, permission-based management of users and resources. By organizing users into Teams and segmenting resources into Namespaces, you can ensure data independence and secure monitoring across your organization.

​
Roles and permissions

You can assign roles (Admin, Editor, Viewer, and Custom) to users and teams at the global and namespace access levels to control access to different resources in Validio. Custom roles allow you to follow the Principle of Least Privilege to ensure users have the minimum level of access necessary to complete their specific tasks. For more information see Managing Roles.

​
Resource access levels

Roles grant combinations of READ and WRITE capabilities to resources at the global and namespace levels. WRITE permission includes READ, so the tables below list only the additional capabilities that WRITE grants on top of READ. Sources, validators, filters, windows, and segmentations also have a third level, APPROVE, which is used by approval workflows.

​
Global resources

Global resources are available workspace-wide (not tied to a specific namespace). By default, all users have READ access to global resources.

​
Namespaced resources

Access to namespaced resources is restricted. Users can only interact with these resources if granted permission directly or through their team membership.
In a namespace with approval workflows enabled, WRITE on sources, validators, filters, windows, and segmentations lets a user propose changes as drafts, and the APPROVE level lets a user approve or send back the drafts that others have submitted. The system Admin role holds APPROVE on all five; custom namespace roles can grant it per resource.

​
Users and teams

Teams are used to organize users into groups which you can base on business units or areas of responsibility within your organization. Different teams can configure and manage their own resources separate from other teams. For example, individual teams can see their data quality without it being affected by incidents that are happening in other teams. For more information, see Managing Users and Managing Teams.

​
Namespaces

Namespaces in Validio are used to organize and isolate resources into managed groups, allowing teams to access only the resources assigned to them. This separation ensures that each team can manage its resources independently, without interference from other teams, and helps control data visibility within the Validio platform. For more information, see Managing Namespaces.