{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"redocly_category":"Products","product_name":"Control Panel","type":"markdown"},"seo":{"title":"Policy Based Database Permissions Matrix","description":"Treasure Data Product Documentation · Collect and Unify · Segment and Activate · Experiment and Analyze · Decisioning Automate with AI Scale and Trust.","siteUrl":"https://docs.treasuredata.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"policy-based-database-permissions-matrix","__idx":0},"children":["Policy Based Database Permissions Matrix"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use the following matrix to understand what permission type allows access to databases, tables, and so on. For more information on how to assign policy-based database permissions, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/control-panel/security/policies/setting-policy-based-database-permissions-in-td-console"},"children":["Setting Policy-based Database Permissions in Treasure Console"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following table shows the permissions matrix for policy-based database access control."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Permission Type"},"children":["Permission Type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Definition"},"children":["Definition"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Database Permissions"},"children":["Database Permissions"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Not Configured"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users cannot view or access databases."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["None"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Full Access"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users have full access to all databases."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Query databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Update databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Import databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Delete databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Download databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List of tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Import data to a database table"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read metadata"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Update metadata"]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Limited Access"]}]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Users can access databases with permissions for specific databases."]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Specific database + one of the following permissions:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#general-access"},"children":["General Access"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#query-only"},"children":["Query-only"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#import-only"},"children":["Import-only"]}]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Download"]}]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Users can download databases."]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The user can"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Download the query results from the database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["See the query results on the Treasure Console"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If the user does not have permission, they cannot download data from the database, and can only see 50 records of query results on the Treasure Console."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In addition, job results are not available in Treasure Workflow like store_last_results:true of td>: operator and td_for_each>: operator."]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Manage Own"]}]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Users can create a database. The user is the database owner and can manage and delete the database."]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The database owner can:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Query databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Update databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Import databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Delete databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List databases"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List of tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Import data to a database table"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read metadata"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Update metadata"]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["General Access"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users can access a specific database and work with database tables."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Query database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Import data to a database table"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read metadata"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Update metadata"]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Query-only"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users can only query the databases that the administrator has granted permission to."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Query database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read metadata"]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Import-only"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users can create tables and import data to a database table."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["List database"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Import data to a database table"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read metadata"]}]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"legacy-database-and-policy-based-database-permissions-differences","__idx":1},"children":["Legacy Database and Policy-Based Database Permissions Differences"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following table compares the differences between legacy and policy-based database permissions."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Database Permissions"},"children":["Database Permissions"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Differences"},"children":["Differences"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Legacy Database Permissions"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Full Access"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user has full access (including download) to a ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["specific"]}," database."]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Policy-Based Database Permissions"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Full Access"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user has full access to ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["all"]}," databases."]}]}]}]}]}]}]}]},"headings":[{"value":"Policy Based Database Permissions Matrix","id":"policy-based-database-permissions-matrix","depth":1},{"value":"Legacy Database and Policy-Based Database Permissions Differences","id":"legacy-database-and-policy-based-database-permissions-differences","depth":1}],"frontmatter":{"seo":{"title":"Policy Based Database Permissions Matrix"}},"lastModified":"2026-06-01T09:09:59.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/control-panel/security/policies/policy-based-database-permissions-matrix","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}