Configure privileges for user groups

Configure privileges for user groups

Each user group in ThoughtSpot assigns a set of privileges to its users. When a user is assigned to a group in ThoughtSpot, the default privileges associated with a group are assigned to its users.

ThoughtSpot also has a default group called All. When you create new users in ThoughtSpot, they are automatically added to All. By default, the members of All group do not have permission to download or upload data. You can use the Group API endpoints to globally add a privilege to All.

ThoughtSpot supports the following group privileges:

  • DATADOWNLOADING

    Allows users to download data from search results and Liveboards. When the DATADOWNLOADING privilege is applied, the users can download all the data sources that a group can access.

  • USERDATAUPLOADING

    Allows users to upload their data to ThoughtSpot.

Add a privilege to a user group🔗

To add a privilege to a group, send a POST request to the following endpoint URL:

POST /tspublic/v1/group/addprivilege

Request parameters🔗

Form parameterDescription

privilege

String. The type of privilege to add. Valid values are DATADOWNLOADING and USERDATAUPLOADING.

groupNames

String. A JSON array of group names to which you want to add the privilege. To add a privilege to all user groups, specify All.

Example request🔗

cURL
curl -X POST --header 'Content-Type: application/x-www-form-urlencoded' --header 'Accept: application/json' --header 'X-Requested-By: ThoughtSpot' -d 'privilege=DATADOWNLOADING&groupNames=All'
'https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/addprivilege'
Request URL
https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/addprivilege

Example response🔗

204 - Success

Remove a privilege from a user group🔗

To delete a DATADOWNLOADING or USERDATAUPLOADING privilege from the system default All group, send a POST request to the following endpoint URL:

POST /tspublic/v1/group/removeprivilege

Request parameters🔗

Form parameterDescription

privilege

String. Type of the privilege to delete. Valid values are DATADOWNLOADING and USERDATAUPLOADING.

groupNames

String. A JSON array of group names. To remove the privilege from all user groups, specify All.

Example request🔗

cURL
curl -X POST \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Accept: application/json' \
--header 'X-Requested-By: ThoughtSpot' \
-d 'privilege=USERDATAUPLOADING&groupNames=All' \
'https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/removeprivilege'
Request URL
https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/removeprivilege

Example response🔗

204 - Success