- Getting started
- Licensing
- Setup and configuration
- Hosting model
- Enabling the service
- Managing access
- Controlling UI access
- Tenant migration and deletion
- Using the service
- Reference
- Examples and tutorials
- Logging
Data Fabric user guide
Overview
UI Profile allows tenant administrators to control which users and groups can access the Data Fabric interface. Users with restricted UI access are redirected to an Unauthorized page when they navigate to Data Fabric.
UI Profile does not affect API access. Users with restricted UI access can still interact with Data Fabric through automations, APIs, and other programmatic interfaces. UI Profile complements role-based access control by controlling who can access the UI directly.
How it works
When you add or edit a role assignment on the Manage Access page, a UI Profile option appears in the assignment dialog:
| Option | Behavior |
|---|---|
| Show UI (default) | User can access the Data Fabric interface. |
| Hide UI | User is redirected to an Unauthorized page. |
Data Fabric uses an additive access model: if any of a user's assignments (individual or group) grants Show UI, the user has UI access. Hide UI only takes effect when no other assignment grants Show UI.
Evaluation rules
| Everyone group | User/group assignment | Result |
|---|---|---|
| Hide UI | Show UI | UI accessible |
| Hide UI | Hide UI | UI hidden |
| Hide UI | No assignment | UI hidden |
| Show UI | Hide UI | UI accessible |
Users with the Administrator role always have UI access. The Hide UI option is disabled for Administrator assignments.
Restrict UI access
Since all users belong to the Everyone group, you must first set Hide UI on the Everyone group. Then grant Show UI to specific users or groups.
Step 1: Configure the Everyone group
- Go to Data Fabric > Manage Access > Assign Roles.
- Select the edit icon next to the Everyone group.
- In UI Profile, select Hide UI.
- Assign a role (for example, Data Reader).
- Select Save.
A role assignment is required. UI Profile is a property of role assignments.
Step 2: Grant UI access to specific users or groups
- Go to Data Fabric > Manage Access > Assign Roles.
- Select Add, or select the edit icon next to an existing assignment.
- In UI Profile, select Show UI.
- Select the appropriate roles and select Save.
Restore UI access
- Go to Data Fabric > Manage Access > Assign Roles.
- Select the edit icon next to the user or group.
- In UI Profile, select Show UI.
- Select Save.
Restricted access experience
Users with restricted UI access see an Unauthorized page when navigating to Data Fabric. They cannot access entity management, schema editing, or data browsing.