DSN level user security permission

[Mahadeva]

Hi All,

I would like to know if any DSN level restriction is possible at user level in the machine installed with alteryx designer.

So DSN needs to be restricted to particular users and no one else should be able to build workflows to query against this DSN.

The scenario is, we have multiple apps being developed in the development server installed with alteryx designer which has respective system DSN's created for odbc connection.

The same server is accessed by multiple alteryx designer developers, R language coders etc. and all these users are able to access all the DSN's available and establish odbc connection.

To have better security, we would like to restrict the DSN to respective developers of the application and then migrate to production system for run.

Hence request your help to understand a possible way to achieve the above requirement.

[mceleavey]

@TheOC ?

[TheOC]

hi @Mahadeva 

If you have Alteryx Gallery, I would recommend the Manage Data Connections resource. This allows for a Gallery Administrator to create data connections in the gallery, to be shared with users of Alteryx Designer. For this functionality, Alteryx Designer does require the company's Gallery to be added.

It is also possible to require credentials upon running a workflow on the gallery, which you may find useful in this use case.

Hope this helps!
TheOC

[Mahadeva]

Hi @TheOC ,

Appreciate your quick response.

However the workflows are not deployed into gallery. We develop workflows and run it via Alteryx Designer itself.

Hence wanted to have restrictions while running workflows in the machine via Alteryx designer itself.

Also we have some external R codes that are triggered via command prompt which uses system DSN created in machine to establish ODBC connection.

Would like to know how we can manage the above.

[danilang]

Hi @Mahadeva 

If all your users are using one machine to run the workflows and other processes, you can set up User DSNs as opposed to System.  This will take more work to initially configure, but then you'll be able to segregate the DSN entries by user.

Dan 

[Mahadeva]

Appreciate your quick responses @TheOC @danilang . Will try these options and revert.

Stay safe.

Regards.

Mahadev