Hi @npariso
Very interesting questions you are asking, generally the Alteryx Server account has limit access to resources, my answers are based on my experience although I did not know if the Alteryx Service had elevated privileges.
- Accessing a file location on a network drive location via server that they normally would not have access to in desktop designer
We were not able to access network locations other than the ones granted to the service account, actually developers and service account shared similar access privileges; there were situations where the data was located at a folder out of reach, we handled this via making the data available via email (mostly Excel or CSV files).
- Malicious/Careless SQL commands that when done locally on the users machine will not work, but through the elevate service account will
Our connections to database resources was managed by the administrators, so we only have readonly access to databases.
- Other cases where a user can access data they normally wouldn't be able to since server is using an elevated service account
Very difficult because the access privileges to applications, databases, file systems was very well managed.
When we developed workflows for departments with strong access rules, usually these departments have their own developers, with access to their daily data, the workflow was published to the Gallery and its access controlled with collections, and login credentials, in Alteryx, at the time of publishing we can configure the workflow to request login credentials (login account and password) usually by member of the team with those restricted access permissions.
Perhaps you should read this article How Workflow Credentials Work on a Gallery
hth
Arnaldo
