| sidebar | sidebar |
|---|---|
| permalink | reference-iam-data-classification.html |
| keywords | role-based access control, IAM roles, access delegation, data classification, cloud data sense, compliance admin, classification viewer |
| summary | NetApp Data Classification supports two roles to manage read and write access to assets. |
NetApp Data Classification supports identity and access management (IAM) roles so you can tailor access to the tasks users need to accomplish. How you assign roles depends on your own business and storage management practices.
Data Classification supports two roles:
-
Compliance admin
-
Classification viewer
The Compliance admin role works only at the organization level to manage access to Data Classification resources. If a user has responsibilities less than an Organization admin, they must have the Compliance admin role to install Data Classification.
|
Important
|
The Compliance admin role is not a standalone role. Users with the Compliance admin role must also be associated with at least one Platform role. |
|
Note
|
The Compliance admin was added to Data Classification in version 1.54. If you had deployed Data Classification prior to this release and had a platform role with less access than an organization admin, the Compliance admin role was automatically associated with the user account. |
The Classification viewer is designed for users who need access to scan results in Data Classification, but don’t need access to configuration resources. Users with the Classification viewer role can view the results of mapping and full scans to assess areas for storage savings or potential data risks. Users with the Classification viewer role can also generate reports for resources they have access to. These users can’t enable or disable scanning of volumes, buckets, or database schemas.