The workspace admin user is super-user for the entire workspace.
NOTE: In , any user who is granted the admin role is also granted the workspace admin role, which enables owner-level access to some object types in the workspace. Details are below.
The workspace admin can enable and disable features and capabilities in the workspace. For more information, see Workspace Settings Page.
A workspace admin can administer all of the other users of the workspace, including disabling or deleting the user.
NOTE: In , the workspace admin can also edit the platform roles assigned to individual users. For more information, see Workspace Users Page.
A workspace admin has owner-level access to objects in the workspace.
NOTE: A workspace admin can access these objects like their owners, even if the objects have not been shared.
This access applies, but is not limited, to the following types of objects:
A workspace admin has collaborator-level access to the following objects:
A workspace admin does not have any changed permissions for access to the following object types:
The workspace admin can access the data of individual users under the following conditions.
NOTE: Workspace admin privileges do not affect access permissions on outside storage systems. Those systems can prevent data access by the workspace admin user.
Connections with credentials:
If the data is accessed through a connection that requires a specific set of credentials, then the workspace admin can access all data available through the connection when the credentials are shared.
If connection credential sharing is disabled after a connection has already been shared with credentials, then the connection remains accessible to the workspace admin and to all users who were previously shared the connection. Workspace admins created in the future also inherit this access. The sharing of a connection's credentials cannot be revoked, except by deleting the connection.
A workspace admin cannot:
If a connection with shared credentials remains after credential sharing has been disabled, you can do one of the following for the connection:
For more information on credential sharing, see Configure Sharing.File-based backend storage:
Source datasets and job results that are stored on file-based backend storage systems for individual users can be accessed by the workspace admin except in the following situations:
Data is accessible under the connections with credentials limitations described above.