Column permission groups

A table's permission groups decide which roles can read the table. The Permission Group cell on the table's Columns step narrows that per column: there you choose the groups that can read the column. The groups come from the table's General step, and the admin group always has full access to every column.

Choose the groups for a column

1. Open the table and go to its Columns step. The step and its grid are covered on Edit a table's columns.
2. Click the column's Permission Group cell. When the column has no groups, the cell reads Add groups….
3. Search the list (Search groups…) or scroll it, and tick each group that should read the column. Select all at the top of the list takes every group shown.
4. Close the list. The cell updates as you pick, and the picks stay with the column as unsaved changes, like any other column edit.

What the cell shows

• The cell lists the chosen groups on one line. When the line is too long it is cut short; hover the cell to read the full selection in a tooltip.
• A locked group stays on the column: it cannot be removed, it sorts first among the chosen groups, and the list marks it with a lock.
• The list's footer counts the selected groups. When there are unlocked picks, it offers Clear, which removes them in one go; locked groups stay.
• A search with no match reads "No matches found".

When the table has no groups yet

The cell reads "No permission groups added to table" and offers Add in General, which takes you to the table's General step. Add the roles there, under Configuration > Permission Groups, and the column's list offers them. The wider access model is on Warehouse permissions and row-level security.

Limits and the admin group

• You can pick up to 100 groups for a column.
• Once the column is at the limit, the remaining groups grey out and cannot be added until you remove one.
• The admin group always has full access to every column, so you do not pick it per column. The column's help reads: "The admin group has full access to all columns by default."

Questions, answered

Can I create a new group in the cell?

No. The cell offers the groups the table already has and cannot create new ones. Add the role to the table on its General step, under Configuration > Permission Groups, and it becomes available in the cell. See Warehouse permissions and row-level security.

Why did the rest of the list grey out?

The column reached its limit. A column holds up to 100 groups, and at the limit the remaining groups grey out and cannot be added until you remove one.

How do I take a group off a column?

Open the cell and untick the group. To clear several at once, use Clear in the list's footer; locked groups stay on the column.

What does the lock on a group mean?

The group is locked for the column: it cannot be removed, and it sorts first among the chosen groups. The list marks it with a lock so you can see it cannot be unticked.

When do my picks get saved?

The cell updates as you pick, and the change is an unsaved column edit until the step is applied. The saving flow is on Edit a table's columns.

The cell cuts the group names short. How do I see them all?

Hover the cell; a tooltip lists the full selection. You can also open the cell, where every chosen group is ticked.

Can I select every group at once?

Yes. Select all at the top of the list takes every group shown in one go.

Can I search the list?

Yes. Type in Search groups… and the list filters as you type. When nothing matches, it reads "No matches found".