DP security matrix · Diagram Design

Data platform access matrix

A compact policy view for five human roles across storage, query, analysis, reporting, and orchestration. Each intersection resolves to one explicit permission level.

Data platform access matrixA five by five permission matrix for platform roles and components. Componentvs. AD group Data EngineerGRP-DATA-ENGData ScientistGRP-DATA-SCIAnalystGRP-ANALYSTAdministratorGRP-ADMINExternal PartnerGRP-PARTNER Object storageS3WriteReadNoneAdminNone Query engineSQLWriteReadReadAdminRead NotebooksPYWriteWriteNoneAdminNone BI toolDASHWriteReadWriteAdminReadshared dashboards OrchestratorDAGWriteReadNoneAdminNone LEGENDAdminWriteReadNonepartner read boundary

THE HEADLINE

Partner access stops at BI

External partners receive read-only shared dashboards. They cannot enter storage, notebooks, or orchestration.

Administration stays separate

  • Administrators hold admin rights everywhere.
  • Engineers write across the platform.
  • Scientists write only in notebooks.

Analyst scope is narrow

Analysts query governed data and author BI content, while object storage, notebooks, and workflow controls remain unavailable.