Controlling UI access

概述

UI Profile allows tenant administrators to control which users and groups can access the Data Fabric interface. Users with restricted UI access are redirected to an Unauthorized page when they navigate to Data Fabric.

UI Profile does not affect API access. Users with restricted UI access can still interact with Data Fabric through automations, APIs, and other programmatic interfaces. UI Profile complements role-based access control by controlling who can access the UI directly.

工作方式

When you add or edit a role assignment on the Manage Access page, a UI Profile option appears in the assignment dialog:

选项	行为
Show UI (default)	User can access the Data Fabric interface.
Hide UI	User is redirected to an Unauthorized page.

Data Fabric uses an additive access model: if any of a user's assignments (individual or group) grants Show UI, the user has UI access. Hide UI only takes effect when no other assignment grants Show UI.

Evaluation rules

Everyone group	User/group assignment	结果
Hide UI	Show UI	UI accessible
Hide UI	Hide UI	UI hidden
Hide UI	No assignment	UI hidden
Show UI	Hide UI	UI accessible

备注：

Users with the Administrator role always have UI access. The Hide UI option is disabled for Administrator assignments.

Restrict UI access

Since all users belong to the Everyone group, you must first set Hide UI on the Everyone group. Then grant Show UI to specific users or groups.

Step 1: Configure the Everyone group

1. Go to Data Fabric > Manage Access > Assign Roles.
2. Select the edit icon next to the Everyone group.
3. In UI Profile, select Hide UI.
4. Assign a role (for example, Data Reader).
5. 选择“保存”。

备注：

A role assignment is required. UI Profile is a property of role assignments.

Step 2: Grant UI access to specific users or groups

1. Go to Data Fabric > Manage Access > Assign Roles.
2. Select Add, or select the edit icon next to an existing assignment.
3. In UI Profile, select Show UI.
4. Select the appropriate roles and select Save.

Restore UI access

1. Go to Data Fabric > Manage Access > Assign Roles.
2. Select the edit icon next to the user or group.
3. In UI Profile, select Show UI.
4. 选择“保存”。

Restricted access experience

Users with restricted UI access see an Unauthorized page when navigating to Data Fabric. They cannot access entity management, schema editing, or data browsing.

相关主题

• 管理访问权限
• 自定义角色