Sharing a semantic model

Sharing a semantic model lets you grant permissions to users and roles.

As the model owner, you control who can view, edit, delete, or share the model.

By default, you have full permissions for models you create.

Administrators also have full permissions for all repository models.

Note: You can assign only the permissions that you currently have. If you don’t have a permission, you can’t grant it.

In this topic:

• Share a semantic model

• Edit access to a semantic model

• Permissions for semantic models

Share a semantic model

Share a semantic model by adding a user or role and assigning permissions.

Complete the following steps to share a semantic model with a user or role:

1. Log into the Pentaho User Console (PUC).

2. Open the Semantic Model Editor by taking one of the following actions:

   • If you are using the Modern Design of PUC, in the menu on the left side of the page, click Semantic Model Editor.

   • If you are using the Classic Design of PUC, click File > Semantic Model Editor.

   The Semantic Model Editor opens.

3. In the Semantic Models list, navigate to the model you want to share by searching or scrolling through the list.

4. In the row that contains the semantic model you want to share, click the More Actions icon, and select Share.

   The Share Name Model window opens.

5. In the Add username or role box, enter or select the user or role.

6. Click the Allowed to box.

7. Turn on the toggle for one or more of the following options:

   • Change Connection of Semantic Models

   • Delete Semantic Models

   • Edit Semantic Models

   • Share Semantic Models

   • View Semantic Models

8. Click + Add.

9. Click Apply.

Edit access to a semantic model

Edit access to control whether a user or role can view, edit, delete, or share the model.

Complete the following steps to edit access to a semantic model for a user or role:

1. Log into the Pentaho User Console (PUC).

2. Open the Semantic Model Editor by taking one of the following actions:

   • If you are using the Modern Design of PUC, in the menu on the left side of the page, click Semantic Model Editor.

   • If you are using the Classic Design of PUC, click File > Semantic Model Editor.

   The Semantic Model Editor opens.

3. In the Semantic Models list, navigate to the model you want to edit.

4. In the row that contains the semantic model, click the More Actions icon, and select Share.

   The Share Name Model window opens.

5. Click one of the following tabs:

   • All: List of all users and roles.

   • Users: List of only users.

   • Roles: List of only roles.

6. Find the user or role you want to edit, and then click the Edit Permissions icon.

   The Share Name Model window opens with only that user or role.

7. Take one or more of the following actions:

   • To remove all access, click Remove Access, and then in the Remove permissions dialog box, click Remove.

   • To set all permissions at once, in the Set all to list, select one of the following options:

     • No permissions

     • Full permission

     Then click Apply.

   • To add or remove permissions individually, turn the following toggles on or off:

     • Change Connection of Semantic Models

     • Delete Semantic Models

     • Edit Semantic Models

     • Share Semantic Models

     • View Semantic Models

     Then click Apply.

Note: If you turn off all toggles, the Remove permissions dialog box opens. Click Remove to finish removing access.

Permissions for semantic models

The Semantic Model Editor permissions model defines how a user accesses and manages semantic models.

Users inherit permissions from their individual assignments, roles, and groups.

By default, no access is granted unless you assign it.

There are two permission levels:

• Global permissions apply across all models.

• Content-level permissions apply to specific models.

For a user to perform an action in Semantic Models, the user must be authorized at both levels for that action.

Global permissions

Permissions for the Semantic Model Editor that administrators can assign to users, roles, or groups.

Important: To grant an ability to a user, manually assign both the global permission and the matching content-level permission. Inherited permissions do not currently satisfy validation requirements.

Permission	Grants ability
Display SME entry point	Access the Semantic Model Editor UI
View semantic models	View accessible models
Create semantic models	Create models
Edit semantic models	Edit accessible models
Delete semantic models	Delete accessible models
Change connection	Modify accessible models connection
Share semantic models	Share accessible models
Import semantic models	Manage imported models

Content-level permissions

Permissions for individual semantic models that the model owner can assign to other users.

Important: To grant an ability to a user, manually assign both the content-level permission and the matching global permission. Inherited permissions do not currently satisfy validation requirements.

Only users with the Share permission (and the corresponding global permissions) can assign content-level permissions.

Users can grant only permissions they also hold at both the global and content levels.

Permission	Grants ability (if global permission also exists)
View	View the model
Edit	Edit the model
Delete	Delete the model
Change connection	Change the connection used in the model
Share	Share the model

Permission inheritance

Important: Inherited permissions do not currently satisfy validation requirements for granting an ability. If the user is not manually assigned both the content-level and global permission, the ability is not granted.

The following permissions automatically grant related permissions at the same level:

Assigned permission	Also grants
Create	Share, View
Edit	View
Share	View
Import	Share, View

Example: Assigning Edit also grants View.