Skip to main content
The Data Access tab controls what data an agent can read and who in your team can use it. For Data Analyst agents (v2), access always goes through the semantic layer: you pick a warehouse connection and the models the agent may use. Those models determine which warehouse tables the agent can query.

​
How access is layered

​
Warehouse connection

Each Data Analyst agent must have a warehouse connection. Semantic queries, data discovery, and raw SQL all run with that connection. Google BigQuery is the warehouse available today; other warehouses are coming soon.
Create separate connectors when you need different access scopes — for example one service account limited to marketing marts, another for finance. Assign the right connector per agent.
Connectors overview →

​
Semantic models

The agent reads data through the semantic models you select on this tab (Custom and Interact models). Each model points at a warehouse source table.
  • You always work in terms of models (and their source tables) — not open-ended SQL against the whole project.
  • Only selected models appear to the agent.
  • If Allow agent to use raw SQL is on, the agent may write SQL, but only against the source tables of the selected models. Tables outside those models are blocked.
When to use a narrow selection:
  • Client- or brand-specific agents that should only see one domain
  • Separating sensitive tables from broadly used reporting models
  • Pairing a narrowly privileged connector with a matching model set
If no semantic source is synced for your organisation, configure one under Settings → Semantic layer before selecting models.

​
User group access

By default, any member of your organisation can use any active agent. Restrict an agent to a group when needed: User groups are managed in Settings → Groups. Typical uses:
  • Agents configured for a specific client’s data — restrict to that client’s account team
  • Sensitive agents — restrict to relevant departments
  • Beta agents — restrict to your own team before rolling out
Groups →