Skip to main content

Privacera Documentation

Service Explorer

Service Explorer provides user, group, and role permission information with respect to a service's data sources, schemas, and tables. Its functionality is specific to data resources that are connected to Privacera using the PolicySync method. In Privacera, PolicySync'd data resources are resources, such as PostgreSQL, AWS Redshift, and Snowflake, that have their own native methods of protecting data. Privcera synchronizes resource and tag policy rules onto the target native methods. Connections to PolicySync resources are known as connectors.

To view the Service Explorer page, select Access Management > Service Explorer from the navigation menu.

The left side of the Service Explorer page displays a list of connectors in use. The middle of this page supports a drill-down approach. Select a connector to see a table of databases linked to that connector. For each connected database, you'll also see the associated Policy Type (such as Access), the Access Granted type (e.g. UseDB') and a count (each) of data access User(s), Group(s), and Role(s) provided with access.

ServiceExplorer_DBs.png

The Service Explorer interface allows drill-down to open each object in the table to show its sub-objects. Databases open to schemas which open to tables, which open to table column names. You can return to a parent view by clicking on its name in the breadcrumb list.

  • Click a database to see a list of schemas in that database.

  • Click a schema to see a list of tables in that schema.

  • Click any of the tables to see a list of columns in that table.

At each level you'll see the Policy Type (Access, Deny), type of Access Granted (such as Select') and the a count of data access users, groups, and roles affected by that policy.

Click any non-zero users/group/role count, and you'll get a list of those users, groups, or roles associated with that object along with the user/group/role's associated permissions to that object.

ServiceExplorer_Users.png
ServiceExplorer_Role.png

Both the Connectors list and data repository object lists can be filtered by entering a character substring in the search/filter box above.