Role-based access control

LIMITED TO SECURITY PACK

This feature is limited to the Paradime Security Pack.

The Paradime Security Packr offers a set of pre-configured user roles designed to streamline access management within a Paradime account. To learn more about how user licenses impact your billing, check the link below.

Users and licences

User roles

The following roles are available for assignment in Paradime Security Pack.

Admin

Full Paradime access: develop in IDE, create Bolt schedules, workspaces and manage settings.

Billing Admin

Can manage billing and plans in the Paradime account.

Security Admin

Can access Audit logs and security features.

Workspace Settings Admin

Manage all workspaces settings and create workspaces. Cannot access the IDE or other Paradime Apps.

Workspace Admin

Unrestricted access to the Paradime workspace. Develop using IDE, create Bolt schedules, create and manage workspaces.

Developer

Unrestricted access to Paradime Apps, develop using IDE and create Bolt schedules. Cannot create workspaces or manage settings.

Analyst

Unrestricted access to Paradime Apps, develop using IDE. Cannot create workspaces, Bolt schedules or manage setting.

Business

Read-only access to the Paradime workspace.

Platform permissions

Platform-level permissions govern the management aspects of a Paradime account, like billing and creating workspaces.

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Workspaces - Can create workspaces	✅	❌	❌	✅	✅	❌	❌	❌
Plans - Can manage/update plans	✅	✅	❌	❌	❌	❌	❌	❌
Billing - Can manage/update billing details	✅	✅	❌	❌	❌	❌	❌	❌
Audit logs - Can view / download	✅	❌	✅	❌	❌	❌	❌	❌

Workspaces permissions

Workspace-level permissions govern the access and management of a Paradime workspace, For example access to the Code IDE, Lineage, Catalog, Integrations and Bolt.

Paradime IDE

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can acces code IDE	✅	❌	❌	❌	✅	✅	✅	❌
Can create commits	✅	❌	❌	❌	✅	✅	✅	❌
Can preview data	✅	❌	❌	❌	✅	✅	✅	❌
Can export preview data results	✅	❌	❌	❌	✅	✅	✅	❌

Paradime Lineage

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access PROD lineage	✅	❌	❌	❌	✅	✅	✅	✅
Can access DEV lineage	✅	❌	❌	❌	✅	✅	✅	❌

Paradime Catalog

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access PROD catalog	✅	❌	❌	❌	✅	✅	✅	✅

Paradime Bolt scheduler

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access schedules logs	✅	❌	❌	❌	✅	✅	✅	✅
Can create schedules	✅	❌	❌	❌	✅	✅	❌	❌
Can trigger manual runs	✅	❌	❌	❌	✅	✅	✅	❌
Can trigger schedules config parsing	✅	❌	❌	❌	✅	✅	✅	❌
Can manage Webhooks	✅	❌	❌	❌	✅	✅	❌	❌

Paradime Radar

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access Radar metrics	✅	❌	❌	❌	✅	✅	✅	✅
Can access Data alerts	✅	❌	❌	❌	✅	✅	✅	✅
Can configure Data alerts	✅	❌	❌	❌	✅	✅	❌	❌

Data warehouse connections settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view connections	✅	❌	❌	✅	✅	✅	✅	❌
Can manage code IDE connections	✅	❌	❌	✅	✅	❌	❌	❌
Can manage code Bolt scheduler connections	✅	❌	❌	✅	✅	❌	❌	❌
Can manage code Cost connections	✅	❌	❌	✅	✅	❌	❌	❌
Can update code IDE user own credentials	✅	❌	❌	✅	✅	✅	✅	❌

Workspace settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view workspace settings	✅	❌	❌	✅	✅	✅	✅	❌
Can manage dbt™️ version	✅	❌	❌	✅	✅	❌	❌	❌
Can manage Bolt scheduler environment variables	✅	❌	❌	✅	✅	❌	❌	❌
Can manage connected git repository	✅	❌	❌	✅	✅	❌	❌	❌
Can manage API keys	✅	❌	❌	✅	✅	❌	❌	❌

Integration settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view integrations	✅	❌	❌	✅	✅	✅	✅	✅
Can manage integrations	✅	❌	❌	✅	✅	❌	❌	❌

Team settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view teams	✅	❌	❌	✅	✅	✅	✅	✅
Can manage auto-join configurations	✅	❌	❌	✅	✅	❌	❌	❌
Can manage users	✅	❌	❌	✅	✅	❌	❌	❌
Can invite users (check grant permissions)	✅	❌	❌	✅	✅	✅	✅	✅