Skip to main content
Both Database Access and Row Level Permissions are managed using the Resource Access Pane. Databases are where connection data lives once it is brought into Kroo. Databases can be managed in one of three configurations:
  1. Kroo-hosted Data Warehouse
  2. Client-hosted Data Warehouse
  3. Multiple client-hosted Data Warehouses
Kroo supports connections to a wide variety of data destination platforms. Currently, only Microsoft SQL and Microsoft Fabric data destinations are compatible with Kroo’s Row Level Permissions capabilities.
Data brought into the Kroo platform may be sensitive, including financial or performance management data. Managing Database Access at the Resource level controls user and group visibility within the Kroo app. Row Level Permissions then control which database tables and rows a user can see within the database itself. RLP is required for users to view data, even if Data Warehouse access is granted at the Resource level. To configure RLP, select Row-level permissions in the desired database. This opens the Row Level Permissions window:
Row-Level Permissions window listing groups
Row Level Permissions are managed in groups. To create a new group, select + Create Group. In the New Group window, enter a Group name, add an optional Description, and select Continue to logic. In the following window, select which tables to include in the group and define the rules that govern their visibility. To do so, select + Add Table.
New group window on the Table and Row Logic step
Then select the table or tables you would like to grant access to and select Add table(s):
Table Access picker with one table selected
Expand your selected table or tables by clicking the chevron next to the table name, then select your desired filter type. Options are:
  • No filter (full access)
  • Conditions
  • Raw SQL
Define your preferred filter, if applicable, then select Save Filter and Continue to role access.
Conditions filter on a table
You will then be brought to the Resource Access Pane, where you can set which roles and users should be included in this Row Level Permissions group. RLP can be revised and edited later from the Row Level Permissions window.

​
Filter types

Members see all rows in this table. Use this when the table doesn’t contain sensitive data or when members should have unrestricted access to it.
Use Preview Table Data to see the table’s columns and sample rows before building your filter.
A user can belong to multiple groups — their effective access is the union of all their groups. To check a group’s filters from a member’s point of view, use Test as User in Kris AI Context Settings.