Identity and Access Management
SSO integration, platform roles, and how role-based access control works alongside your data warehouse's own permission enforcement.
SSO Integration
- Supports both SAML 2.0 and OAuth 2.0 for SSO
- Integrates with any identity provider via these standards (Okta, Microsoft Entra, Ping, etc.)
- SSO is managed through a dedicated identity and access management integration layer
Platform Roles
| Role | Permissions |
|---|---|
| Admin | Access to all platform capabilities — model creation, editing, publishing, benchmark management, user management |
| Viewer | Can view semantic models, benchmarks, and documentation; cannot edit content |
RBAC Enhancements
- Model edit permissions: model creators have full ownership by default and can selectively grant edit access to collaborators, preventing unintended changes to certified models.
- Admin role expansion / RBAC: more granular role-based control is available by request, supporting persona-based access and audience scoping.
Important: row-level security, column-level security, and table-level access are enforced by the data warehouse when SQL executes with end-user credentials — not by Solid. See Controls and Safeguards for how identity-aware execution works.
Updated 11 days ago
Did this page help you?