When a user creates a data source, he or she is the owner of the data source. A data source can be shared with either Hybrid Data Pipeline user accounts or tenants. Either administrators or standard users can share data sources with other users, but only administrators can share data sources with tenants. Data sources can be shared either through the Data Sources API or the Web UI. (Descriptions of data source sharing API operations begin with Get shared data source users.) As the following sections show, most rules that govern data source sharing depend on whether the data source is being shared with user accounts or tenants.
When a data source is shared with a tenant, the data source is in effect shared with all users in the tenant. However, a data source cannot be shared simultaneously with a tenant and users in the same tenant. When a data source is first shared with users in a tenant and subsequently shared with the same tenant, the shared users are removed from the data source. These individual users will still be able to use the shared data source but only through the share made to the tenant. In turn, once a data source has been shared with a tenant, the data source cannot subsequently be shared with users in the same tenant.
A user with whom a data source has been shared can be moved from one tenant to another. If the owner of the data source is an administrator of the target tenant, the user will continue to have access to the shared data source. However, if the owner is not an administrator of the target tenant, the user will no longer have access to the data source.
Sharing a data source group requires that the member data sources of the group also be shared.
Data source groups may only be created with member data sources that are owned by the creator. In other words, the creator of a data source group cannot include a data source shared by another user in the data source group he or she is creating.
Sharing data sources with Hybrid Data Pipeline user accounts
Either administrators or standard users can share data sources with other users.
To share a data source with a tenant, the data source owner must have either set of the following permissions.
The Administrator (12) permission.
The MgmtAPI (11) permission, the ModifyDataSource (3) permission, and administrative access on the tenant with which the data source is being shared.
The data source owner must apply permissions to the data source. The following permissions can be applied to data sources: ViewDataSource (2), ModifyDataSource (3), UseDataSourceWithJDBC (5), UseDataSourceWithODBC (6), and UseDataSourceWithOData (7). For example, a data source owner may want to share a data source with another user but limit the user's access to OData queries. Therefore, the data source owner would grant only the UseDataSourceWithOData (7) permission to the user.
A data source owner cannot apply permissions he or she does not have to shared data sources. Similarly, an administrator sharing a data source on behalf of the owner cannot apply permissions which the owner does not have.
The data source owner can share the data source with any administrator of the tenant to which he or she belongs and with other users in the tenant to which he or she belongs.
A tenant administrator – a user with administrative access to one or more tenants – can share a data source he or she has created with users in tenants he or she administers.
A system administrator – a user with the Administrator (12) permission – can share a data source he or she has created with any user in any tenant.
A shared data source cannot be deleted. The data source owner must stop sharing the data source with users before the data source can be deleted.
A shared data source owner cannot be deleted. The user accounts with which the data source is being shared must be removed before the shared data source owner can be deleted.
A shared data source owner cannot be moved from one tenant to another. The data source owner must stop sharing the data source before he or she can be moved.
A shared data source cannot be renamed.
A data source cannot be shared with a user account that already has a data source with the same name.
Sharing data sources with Hybrid Data Pipeline tenants
Only administrators can share data sources with tenants.
A tenant administrator – a user with administrative access to one or more tenants – can share a data source he or she has created with any tenant he or she administers.
A system administrator – a user with the Administrator (12) permission – can share a data source he or she has created with any tenant.
The administrator owner of the data source must have either the Administrator (12) permission; or the MgmtAPI (11) permission, the ModifyDataSource (3) permission, and administrative access on any tenant with which the data source will be shared.
The administrator owner of the data source must apply permissions to the data source. The following permissions can be applied to shared data sources: ViewDataSource (2), ModifyDataSource (3), UseDataSourceWithJDBC (5), UseDataSourceWithODBC (6), and UseDataSourceWithOData (7). For example, a data source owner may want to share a data source with another user but limit the user's access to OData queries. Therefore, the data source owner would grant only the UseDataSourceWithOData (7) permission to the user.
A data source owner cannot apply permissions he or she does not have to shared data sources. Similarly, an administrator sharing a data source on behalf of the owner cannot apply permissions which the owner does not have.
A shared data source cannot be deleted. The administrator owner of the data source must stop sharing the data source with users and tenants before the data source can be deleted.
The administrator owner of a shared data source cannot be deleted. The user accounts and tenants with which the data source is being shared must be removed before the administrator owner can be deleted.
The administrator owner of a shared data source cannot be moved from one tenant to another. The data source owner must stop sharing the data source before he or she can be moved.
A shared data source cannot be renamed.
A data source cannot be shared with a tenant if any user account in the tenant already has a data source with the same name.
When a data source is shared with a tenant, the data source is in effect shared with all users in the tenant. However, a data source cannot be shared simultaneously with a tenant and users in the same tenant. When a data source is first shared with users in a tenant and subsequently shared with the same tenant, the shared users are removed from the data source. These individual users will still be able to use the shared data source but only through the share made to the tenant. In turn, once a data source has been shared with a tenant, the data source cannot subsequently be shared with users in the same tenant.