Data Manager review of Data Delivery Apply Security requests

• Process overview
• Report/View name
• Report/View overview
• Publisher
• Permissions
• Decision

Process overview

Data Delivery Apply Security is a tool for assigning security to Tableau workbooks and Denodo views. When a Tableau publisher or Denodo developer requests the assignment of security to a workbook or view, respectively, this action creates a document in Kuali workflow, which in turn sends an email message to the appropriate Data Managers (DMs).

To handle a security assignment request, DMs should:

1. Click the link in the email message from Kuali workflow.
2. Review the request's five sections (detailed below).
3. Approve or deny the request.

Report/View name

The name is a clickable link to the actual workbook or view.

Report/View overview

This section, labeled "Report overview" for Tableau workbooks or "View overview" for Denodo views, contains information about the object, such as its type (Tableau or Denodo), the environment, the data classification level of data in the workbook or view, the enterprise system(s) where the data originated, and the requested viewers (groups to be assigned). There can be multiple groups listed here.

This section has one interactive component:

• The viewers' names are clickable links to the ACM group(s) that will secure the object.

Publisher

The "Publisher" section contains information about the person who submitted the request, including name, username, department, campus, and the publisher's rationale for the publishing request.

This section has one interactive component:

• The publisher's name is a clickable link that opens an email message to the publisher. The DM can use this message to send questions or concerns to the publisher.

Permissions

For Tableau workbooks, the "Permissions" section contains "Compliance constraints" and "Data set download". For Denodo views, only the "Compliance constraints" are present.

Compliance constraints

The "Compliance constraints" are a list of the Acceptable Use Agreement, the FERPA tutorial, and the HRMS Data Use tutorial requirements. If any of these items have "Required" beside them, Data Delivery will ensure the object is only viewable by users who have completed these requirements and are in the viewers group(s) listed in the Report/View overview section.

Data set download

"Data set download" is below the "Compliance constraints" on requests for Tableau workbooks, and will display one of the following:

• "Not allowed" means that the publisher is not requesting any special privileges.
• Allowed means that the publisher is requesting that viewers of this workbook have permission to download the full set of data behind the visualization.

Decision

The "Decision" section contains the following:

• The Enterprise Systems DMs assigned to this request are listed. Data Delivery allows multiple sets of DMs to review a request. One DM from each set is required for an approval; only one DM in total is required for a disapproval.
• The request routing log link is a link to the actual Kuali workflow document.
• The "Comments" section is a space where DMs can write messages about the request. Comments are optional for an approval but required for a disapproval, and will be sent to the requester.

Approve or deny the request

DMs who have reviewed the information described above can approve or deny the request in the "Decision" section:

• Clicking the Approve button approves the workflow document. If only one Enterprise System was listed in the Report/View overview section, then any approval here will mark the Kuali workflow document as complete and will add the security to the Tableau workbook or Denodo view. If there are multiple sets of DMs and one of the DMs from one of those sets has not yet approved the request, the document will require further approvals and remain in route. The publisher will only be notified when all necessary approvals have been submitted.
• Clicking the Deny button after entering a comment will cause the document to be disapproved. The publisher will be notified immediately.