-
Notifications
You must be signed in to change notification settings - Fork 365
Redshift Data Graph User Permission #7617
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Conversation
✅ Deploy Preview for segment-docs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Quick handful of things to clean up.
### Database | ||
Create a separate databse for Segment usage (for example, `segment_workspace`). This will have the following schemas: | ||
1. Profiles Sync Schema (for example: `profiles_sync`) | ||
* Segment will add [Profiles Sync tables](/docs/unify/profiles-sync/tables/) to this schema |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Segment will add [Profiles Sync tables](/docs/unify/profiles-sync/tables/) to this schema | |
* Segment adds [Profiles Sync tables](/docs/unify/profiles-sync/tables/) to this schema |
Or "Segment then adds..."
1. Profiles Sync Schema (for example: `profiles_sync`) | ||
* Segment will add [Profiles Sync tables](/docs/unify/profiles-sync/tables/) to this schema | ||
2. `__segment_reverse_etl` schema | ||
* Segment will create the [`__segment_reverse_etl` schema](/docs/connections/reverse-etl/system/#reverse-etl-schema) to add checksum tables for Linked/Data Graph |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Segment will create the [`__segment_reverse_etl` schema](/docs/connections/reverse-etl/system/#reverse-etl-schema) to add checksum tables for Linked/Data Graph | |
* Segment creates the [`__segment_reverse_etl` schema](/docs/connections/reverse-etl/system/#reverse-etl-schema) to add checksum tables for Linked/Data Graph |
### User | ||
Have 2 roles assigned to the Segment user: | ||
* Profiles Sync role (for example, `segment_profiles_sync_role`) | ||
* Linked/Data Graph role (for example, `segment_linked_role`) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Linked/Data Graph role (for example, `segment_linked_role`) | |
* Linked/Data Graph role (for example, `segment_linked_role`) |
Can we split this "Linked/Data Graph" out into "Linked Audiences and Data Graph" or something? I feel like the combo term "Linked/Data Graph" is very internal and wouldn't be clear to an external audience.
The profiles sync role has the following permissions: | ||
* Read and write access to the Profiles Sync schema (for example, `profiles_sync`) | ||
|
||
#### Linked/Data Graph role (`segment_linked_role`) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
#### Linked/Data Graph role (`segment_linked_role`) | |
#### Linked/Data Graph role (`segment_linked_role`) |
See above re: "Linked/Data Graph".
* The second database has read access | ||
|
||
### Database | ||
Create a separate databse for Segment usage (for example, `segment_workspace`). This will have the following schemas: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Create a separate databse for Segment usage (for example, `segment_workspace`). This will have the following schemas: | |
Create a separate database for Segment usage (for example, `segment_workspace`). This will have the following schemas: |
|
||
Set up your Redshift Data Graph. You can choose from two different permissions options depending on your use case. | ||
|
||
## Permissions Option 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
## Permissions Option 1 | |
## Permissions option 1 |
Should be sentence case
* Read access to Profiles Sync schema (for example, `profiles_sync`) to read Segment Profile/Event tables that are created by Profiles Sync | ||
* Read access to full user data schema (for example, devices schema) or read access to specific tables in the user data schema (for example, `user_devices` table or `device_locations` table) | ||
|
||
## Setup Guide |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
## Setup Guide | |
## Setup guide |
|
||
2. Select 1 of the options below: | ||
|
||
a. (*Option 1*):: Assign the Linked/Data Graph role with read access to full user data schema |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
a. (*Option 1*):: Assign the Linked/Data Graph role with read access to full user data schema | |
a. (*Option 1*):: Assign the Linked/Data Graph role with read access to full user data schema |
Is "full user data schema" a term product is wanting us to use? I find this a bit confusing, maybe something like "access to all tables in the user data schema" would make more sense?
Set up the Data Graph so that Segment has access to a single database. | ||
|
||
### Database | ||
Create a single database for Profiles Sync & Linked usage (for example, `segment_workspace`). This has the following schemas: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Create a single database for Profiles Sync & Linked usage (for example, `segment_workspace`). This has the following schemas: | |
Create a single database for Profiles Sync and Linked Audience usage (for example, `segment_workspace`). This has the following schemas: |
Proposed changes
Merge timing
Related issues (optional)