Link asset to Data Access

Note Roles in Data Access are not the same as global or resource roles.

As the owner of an asset, you can link your asset to a Data Access role. This lets users request access to the underlying data in the asset. When a user requests access to an asset that is linked to an existing role, depending on the status of the access request, they are granted access on the data objects that are already included in the role. Depending on how access requests are configured, you can also create a new role directly from your asset.

Prerequisites

• Access requests are configured for the asset type.
• You have a resource role with the Asset > Data > Manage Data Access resource permission on the asset, for example, the Owner resource role. To verify this, on the Responsibilities tab of the asset page, ensure that your name appears in the Owner section.

Steps

1. Open the asset page.
2. Click Actions > Link to Data Access.
3. In the Link to Data Access dialog box, select one of the following options.

   Field	Description
   Link to an existing role	Links your asset to an existing role in Data Access. This option does not require any relation to exist between your asset and any data objects. The role already has its own data objects, so Data Access does not need to populate the role from a relation to your asset, unlike when you create a new role.
   Create a new role	Creates a new role in Data Access, prefilled with the data objects that are related to your asset, and links it to your asset. This option is available only if relation types are selected for the asset type in the access request configuration. For this option to work, at least one of your asset's related data assets needs to be mapped to a data object in Data Access. This typically requires that the parent data source in Data Access is linked to its corresponding System asset in Catalog.

4. If you selected the Link to an existing role option:
   1. Click Continue.
   2. Select the role to which you want to link your asset, and then click Submit.
      Note 

      • The drop-down list includes only the roles that you own and are managed in Collibra. If a role that you own is missing, it may still be managed in the data source and need to be internalized first, or its beneficiaries or inheritance settings may be locked. For SCIM-managed roles, the drop-down list includes the roles that you own and whose controlling groups are managed in Collibra.
      • To enforce the principle of least privilege, avoid linking the asset to an overly broad role that might contain unrelated data objects.
      Your asset is linked to the selected role.
5. If you selected the Create a new role option:
   1. Select the Grant access to this asset directly option, and then click Continue.
   2. On the Create role page, review or edit the auto-populated data objects, and then click Create.
      The new role is created and your asset is linked to it. If the role contains data objects that you do not own, an access request is generated for the respective data owners. The data objects are added to the new role after the access request is implemented.

What's next

Request access to asset data

Related topics

• About access requests
• Configure access requests
• Linking Data Access to Data Catalog
• Request access to asset data