The workspace admin user is super-user for the entire workspace.
The workspace admin can enable and disable features and capabilities in the workspace. For more information, see Workspace Settings Page.
A workspace admin can administer all of the other users of the workspace, including disabling or deleting the user. See Users Page.
A workspace admin has owner-level access to objects in the workspace.
NOTE: A workspace admin can access these objects like their owners, even if the objects have not been shared.
This access applies, but is not limited, to the following types of objects:
A workspace admin has collaborator-level access to the following objects:
The workspace admin can access the data of individual users under the following conditions.
NOTE: Workspace admin privileges do not affect access permissions on outside storage systems. Those systems can prevent data access by the workspace admin user.
Connections with credentials:
If the data is accessed through a connection that requires a specific set of credentials, then the workspace admin can access all data available through the connection when the credentials are shared.
If connection credential sharing is disabled after a connection has already been shared with credentials, then the connection remains accessible to the workspace admin and to all users who were previously shared the connection. Workspace admins created in the future also inherit this access. The sharing of a connection's credentials cannot be revoked, except by deleting the connection.
A workspace admin cannot:
If a connection with shared credentials remains after credential sharing has been disabled, you can do one of the following for the connection:
File-based backend storage:
Source datasets and job results that are stored on file-based backend storage systems for individual users can be accessed by the workspace admin except in the following situations:
Data is accessible under the connections with credentials limitations described above.