Review access across the workspace

As a workspace owner or administrator, open Administration → Access Overview to see every grant in the workspace in one table, instead of opening each resource’s access panel in turn. Creators cannot open this page.

Each row is one resource and one grantee: a person, a group, a workspace role or Everyone. The table shows the grantee’s workspace role, their access level and how they got it:

Through	Meaning
Direct grant	Granted on the resource itself
Owns it	The person who created the resource
Collection	Granted on a collection that holds the workbook, named in the column.

Workbooks take their access from the collections that hold them, so a collection’s grants also appear on each of its workbooks. Clear Include access through collections to see only grants made on the workbook itself. Owners and administrators can open everything without a grant, so they are named once above the table rather than on every row.

Access levels are View, Edit, Full control and Owner. Data connections also have Create: view the connection and build semantic layers on it.

Find what someone can open

Use People & groups next to the search box to choose any mix of people and groups. A group shows its own grants. A person shows their own grants and every grant that reaches them through a group they belong to, their workspace role or Everyone; those rows say Includes and the person’s name. Remove a choice from the chips under the toolbar, or select Clear.

Select a group’s member count to list its members under the row. Select a member, or any person’s or resource’s name, to narrow the table to them. Download CSV exports the rows the filters show.

Change or remove access

Open ⋮ on a row to show a group’s members, narrow the table to the grantee or resource, or change the grant. On a direct grant on a collection, semantic layer or data connection, choose Change to a level or Remove access. Only the levels that resource’s own access panel offers are listed, and the same rules apply: you cannot change your own grant, and Everyone, Viewers and Designers can only be given View. See Manage resource access.

Removing a grant does not remove access the person gets another way, through a group, their role or ownership. Ownership cannot be changed here. A grant that comes from a collection is changed on that collection, and workbook grants are managed through their collections.