Skip to main content

Resource Access

Resource access control in Nexla provides a comprehensive framework for managing permissions and access rights across all platform resources. The system enables fine-grained control over who can view, modify, and manage data sources, destinations, flows, credentials, and other platform components.

Core Concepts​

Resource access in Nexla is built on a flexible permission system that supports both individual and team-based access control. This system ensures data security while enabling collaboration and efficient resource management across your organization.

Access Control Architecture​

The access control system operates at multiple levels to provide comprehensive security and flexibility.

Resource Types​

Nexla supports access control for all major resource types:

  • Data Sources: Control who can view, modify, and manage data ingestion points
  • Data Destinations: Manage access to data output configurations and settings
  • Data Flows: Control who can monitor, control, and modify data processing pipelines
  • Data Sets: Manage access to processed data and analytics datasets
  • Credentials: Secure access to authentication and connection information
  • Teams: Control team membership and administrative privileges
  • Code Containers: Manage access to custom data processing logic

Access Levels​

Each resource supports multiple access levels:

  • Owner: Full control over the resource including deletion and access management
  • Admin: Can modify resource configuration and grant access to others
  • User: Can use the resource for data processing and view configuration
  • Viewer: Read-only access to resource information and status

Access Management Methods​

Nexla provides multiple approaches to managing resource access based on your organizational needs.

Individual Access Grants​

Grant access to specific users for individual resources:

  • Direct Assignment: Assign users directly to resources
  • Role-Based Access: Use predefined roles for common access patterns
  • Temporary Access: Grant time-limited access for specific projects

Team-Based Access​

Manage access through team memberships:

  • Team Resources: Grant teams access to shared resources
  • Inherited Permissions: Team members inherit team-level access rights
  • Collaborative Workflows: Enable team collaboration on shared resources

Organization-Level Control​

Manage access at the organization level:

  • Default Policies: Set organization-wide access defaults
  • Cross-Team Sharing: Enable resource sharing across team boundaries
  • Audit and Compliance: Track all access changes and usage patterns

Access Control Benefits​

Implementing proper resource access control provides several key benefits for your organization.

Security and Compliance​

  • Data Protection: Ensure sensitive data is only accessible to authorized users
  • Audit Trails: Track all access changes and resource usage for compliance
  • Least Privilege: Grant users only the access they need for their work
  • Risk Mitigation: Reduce the risk of unauthorized data access or modification

Operational Efficiency​

  • Collaboration: Enable teams to work together on shared resources
  • Resource Management: Efficiently manage access across large user bases
  • Automation: Automate access provisioning and deprovisioning
  • Self-Service: Allow users to request access through defined processes

Best Practices​

To effectively implement resource access control in your Nexla platform:

  1. Define Clear Policies: Establish clear access policies and procedures
  2. Use Role-Based Access: Implement roles for common access patterns
  3. Regular Access Reviews: Periodically review and update access rights
  4. Monitor Usage: Track resource access patterns and identify anomalies
  5. Document Changes: Maintain clear records of all access modifications

API Endpoints​

The Nexla API provides comprehensive endpoints for managing resource access:

  • GET /resource_access: List all resource access configurations
  • PUT /resource_access: Update resource access permissions
  • GET /resource_access/{resource_type}/{resource_id}: View access for specific resources
  • PUT /resource_access/{resource_type}/{resource_id}: Manage access for specific resources

Next Steps​

To get started with resource access management, explore the following sections: