Catalog permissions

The catalog doesn't have a dedicated resource role. Whether you can view a table or edit its annotations (description and tags) follows the permissions of the connection that table is synced from.

When the same table is synced from multiple connections (see Table identity), you can operate on it if you have the required permission on at least one of its source connections.

Operation	Required permission
Viewing table information	Being able to get the connection's SQL execution results and table information, for at least one source connection
Editing descriptions and tags	Being able to run SQL on at least one source connection
Creating and editing tag definitions	Workspace permissions (Workspace Editor or higher). For operations on definitions, see Tag

Metadata for saved queries in the catalog follows the permissions in Query.

For a feature overview, see Catalog.