Access checks and Model AI handoff

When you approve a semantic model design in a Warehouse Builder chat, the flow continues with two cards in the chat: first the access check for the model's owner role, then the created model and its handoff to the Model AI. This page covers both.

The design card itself is on The semantic model design card, and the builder chat around it is on Warehouse Builder and Lake Builder.

Grant the owner role its access

After the design is approved, the check starts in the same chat. A card titled Grant role access lists every object the model needs, with the instruction:

"Open each object below, add role under Permission Groups, then Save. Tell me when you are done."

  1. Select Open permissions on an object that is not granted. The object's Warehouse popup opens with its permission groups in focus.
  2. Add the owner role under Permission Groups in the popup, then save it.
  3. Select I've granted them, check again. The card sends "I granted the access. Check again." into the chat, and the check runs again. The button is unavailable while the chat is busy.
  4. Repeat for each object.

The card counts the progress as "n of m granted", and every object carries a state:

When everything is granted, the card finishes: the helper text disappears and the title reads "role can read every object". For the admin role the card finishes straight away, and the done title reads "admin reaches every object".

The card's corner Open details button opens the full picture in the chat's Tool History panel: one row per object with its state, the missing columns, the personal data it would show in clear, and its own row-level security.

The warnings on the access card

An object can carry warning lines that name exactly what the grant would expose:

Important

When a column is not marked as personal data, the model cannot be created until the Warehouse Builder marks it. Send the builder a message in the same chat, then select I've granted them, check again.

Open the new model in Model AI

When the check passes, the model is created and its card arrives in the chat, headed Semantic model created, with chips for the model, its Owner role and its data mode (tokenized or clear values).

  1. To hand the model over, select Send the brief to Model AI. The brief goes into the model's Model AI chat, and the model opens in DataPrism.
  2. To open the model without sending the brief, select Open Model AI chat. The model opens with its Model AI panel.
  3. To read the brief first, open What the Model AI will receive on the card; Copy the brief keeps a copy.

When the Model Builder sends the brief itself, the send button and the whole What the Model AI will receive section are hidden, and the card notes: "The Model Builder sends the brief and builds this model with its Model AI." The builder's progress cards appear in the chat, and when its report from the Model AI finishes, that card refreshes itself.

If the personal data check flags the brief, the Model AI panel shows what it found before anything is sent: "If its personal data check flags the brief, the Model AI panel shows what it found before anything is sent."

The model itself is described in Semantic models and BI tables, and the assistant panel beside it is Model AI.

Questions, answered

What is the access check for?

The model reads the objects its design lists. Before it is created, the platform checks that its owner role can read every one of them, and the card shows what is missing and how to grant it. The check follows the design you approve on The semantic model design card.

How do I grant the access the card asks for?

Select Open permissions on an object that is not granted, add the owner role under Permission Groups in the Warehouse popup and save it, then select I've granted them, check again so the check runs again. Repeat until the card counts everything as granted.

Why is "I've granted them, check again" not available?

The chat is busy: an answer is streaming, or you are typing. Wait for the chat to be free, then select it again.

What does "Columns missing" mean?

The role can read the object, but not every column the model needs. The row names the columns, as "Columns missing: columns". Grant the missing columns on the object, then select I've granted them, check again.

What do "Not deployed" and "Not found" mean?

The check could not use that object: it is not deployed in the Warehouse yet, or it could not be found. Only an object that was found and is missing access offers Open permissions; once the object is in place, select I've granted them, check again.

Does the admin role need to grant anything?

No. The admin role reaches every object, so the card finishes straight away, and its done title reads "admin reaches every object".

Why can't the model be created yet?

A column the model needs is not marked as personal data in the Warehouse. The warning reads: "column is not marked as personal data: reports would show it in clear too. The Warehouse Builder must mark it before the model can be created." Once the builder marks the column, select I've granted them, check again.

Where is the new model created?

Empty, in the requester's personal workspace: "Created empty in the requester's personal workspace; move it later with Move."

What does "Send the brief to Model AI" do?

It sends the build brief into the model's Model AI chat, and the model opens in DataPrism, so the Model AI can work from the brief. Open Model AI chat opens the model without sending the brief.

Why can't I see "Send the brief to Model AI"?

The Model Builder is sending the brief itself. The send button and the What the Model AI will receive expander are hidden then, and the card says "The Model Builder sends the brief and builds this model with its Model AI."

Can I read the brief before it is sent?

Yes. Open What the Model AI will receive on the card to read it, and Copy the brief to keep a copy. When the Model Builder sends the brief itself, the expander is not shown.