Skip to main content
Last updated: November 21, 2025
Detrics provides flexible connection sharing and permission controls to help your team collaborate effectively while maintaining security and data access control. This guide explains the different types of connection access, user roles, and what each role can do.

​
Connection Types Overview

Every connection in Detrics is public by default, meaning all workspace members can use it in their queries. You can also restrict access to specific team members when needed.

Public

Available to all members of your workspace by default. Everyone can use it in their queries. Only connection owners and workspace owners can manage the connection.

Restricted Access

Limited to specific team members only. The connection owner selects exactly who can access it. Perfect for client-specific or sensitive data.

​
User Roles and Permissions

Detrics has a role-based permission system that determines what actions each user can perform on connections.

​
Role Hierarchy

1

Connection Owner

The team member who originally created/connected the data source. Has full control over their own connections.
2

Connection Editor

Users who have been granted specific permissions to manage a connection. Can reconnect and modify settings but cannot delete.
Workspace owners can always access and manage all connections in the workspace, regardless of sharing settings.

​
Connection Owner Permissions

When you connect a data source, you become the connection owner with full control over that specific connection.

​
What Connection Owners Can Do

Complete control over your own connections:
  • Reconnect when credentials expire
  • Replace the connection with a different account
  • Archive or unarchive the connection
  • View all account details and usage
  • Restrict access to specific users
  • Generate authentication links for external stakeholders
You maintain ownership even if you restrict the connection to specific users.
Decide how your connection is shared:Option 1: Keep it public (default)
  • All workspace members can create queries with it
  • Only you and workspace owners can manage this connection (reconnect, replace, archive, manage sharing)
Option 2: Restrict to specific users
  • Choose exactly which team members can create queries with it
  • Perfect for client-specific or department-specific connections
  • You can assign connection editors who can help manage the connection
Changing your mind: You can change sharing settings at any time. Restrictions take effect immediately.
Grant management permissions to other team members:
  • Add connection owners who can help manage the connection
  • Remove access from specific users at any time
Even when you delegate editing permissions, you remain the owner and retain full control.
Track how your connection is being used:
  • See which scheduled queries use your connection
  • View who has access (in the sharing menu)
  • Monitor last activity timestamp
  • Check account usage statistics
Click the number in the “Scheduled Queries” column to see exactly which queries are using your connection.

​
What Connection Owners Cannot Do

Limitations: - Cannot access other users’ restricted connections (unless you’re also the workspace owner) - Cannot modify workspace-level settings - Cannot remove team members from the workspace

​
Connection Editor Permissions

Connection editors are team members granted elevated permissions by the connection owner to help manage a connection.

​
What Connection Editors Can Do

When credentials expire, editors can:
  • Reconnect the data source with fresh credentials
  • Authenticate using their own platform credentials
  • Resume paused queries after reconnection
Why this matters: If the connection owner is unavailable and credentials expire, editors can maintain uptime without waiting for the owner to reconnect.
Full visibility into connection information:
  • View associated accounts
  • See which queries use the connection
  • Check connection status and last activity
  • Access account details and IDs
This helps editors troubleshoot issues and understand connection dependencies.
For platforms with multiple accounts (Google Ads, Facebook Ads, etc.), editors can:
  • Add new accounts to the connection
  • Remove accounts no longer needed
  • Update account selections for queries
Limitation: Editors cannot replace the entire connection, only modify which accounts within the connection are available.
All standard query operations:
  • Create new queries using the connection
  • Schedule automatic updates
  • Run manual query executions
  • View and export data

​
What Connection Editors Cannot Do

Restrictions: - Cannot change sharing settings - Only the owner can modify who has access - Cannot archive the connection - Only owners can archive or unarchive - Cannot delete the connection - Permanent actions require owner permission - Cannot replace the connection - Only owners can migrate queries to a different connection - Cannot transfer ownership - The original creator remains the owner

​
How to Grant Editor Access

If you’re a connection owner and want to add editors:
1

Open the connection menu

Click the three-dot menu (⋮) next to your connection.
2

Select 'Manage sharing'

Open the sharing and permissions dialog.
3

Add team members

  • Choose “Restrict access” if you want to limit who can use this connection - Select the team members you want to give access to - Set their permission level to “Can edit” for those who should help manage the connection
4

Save changes

Click “Save” and the selected users immediately receive their assigned permissions.

​
Permission Scenarios

Understanding how permissions work in real-world situations:

​
Scenario 1: New Team Member Onboarding

1

Workspace owner invites user

The workspace owner sends an invitation to join the workspace.
2

New member accepts

The new team member accepts and joins the workspace.
3

Automatic access to public connections

They immediately see all public connections and can use them in their queries.
4

Request access to restricted connections

For restricted connections, they need to ask the connection owner to be added.
5

Create their own connections

The new member can connect their own data sources, which are public by default.

​
Scenario 2: Connection Owner Goes on Vacation

1

Before leaving

The connection owner grants owner permissions to one or more trusted team members so they can manage the connection while away.
2

Credentials expire during vacation

If the connection needs reconnection while the owner is away.
3

Temporary owner reconnects

The team member with owner permissions can reconnect using the same credentials (the owner’s account) to maintain service and keep queries running.
4

Queries resume automatically

Any paused queries resume running after successful reconnection.
5

Owner returns with full control

When the owner returns, they still have complete control and can revoke temporary owner permissions if needed.

​
Scenario 3: Client-Specific Access

1

Agency creates client connection

An agency team member connects a client’s ad account.
2

Restrict to client team

The owner restricts access to only team members working on that client.
3

Other clients remain separate

Team members on different client accounts cannot see or access this connection.
4

Workspace owner maintains oversight

The workspace owner can still access all connections for administrative purposes.

​
Scenario 4: Team Member Leaves Company

1

Workspace owner identifies impact

Review all connections created by the leaving team member and identify which queries depend on them.
2

Replace connections with personal credentials

If the leaving member used personal credentials, the workspace owner must replace those connections with compatible connections (same accounts) from current team members. This ensures queries continue running without interruption.
Important: Reconnections must use the same credentials. Since the leaving member’s credentials won’t be available, connection replacement is the only option to maintain active queries.
3

Archive unnecessary connections

Archive any connections no longer needed.
4

Remove user from workspace

Finally, remove the team member’s access to the workspace.

​
Permission Matrix

Quick reference for what each role can do:
PermissionOwner
Can use the connection and manage all its settings		Editor
Can only use the connection in queries
Use connection to create queries in Google Sheets✅✅
Use connection to build Looker Studio dashboards✅✅
Share connection with other members✅❌
Replace connection✅❌
Archive connection✅❌
Re-connect connection✅❌
Note: Connection owners are determined when the connection is created. A workspace owner can grant you owner permissions for a specific connection.

​
Changing Connection Sharing Settings

​
Making a Connection Public

By default, all connections are public. If you’ve restricted a connection and want to make it public again:
1

Open connection menu

Click the three-dot menu (⋮) on your connection.
2

Select 'Manage sharing'

Open the sharing settings dialog.
3

Remove restrictions

Remove all user restrictions to make it available to all workspace members.
4

Confirm changes

Click “Save” and the connection immediately becomes visible to everyone.

​
Restricting a Public Connection

1

Open sharing settings

Access the connection’s sharing menu.
2

Select 'Restrict access'

Choose the option to limit access to specific users.
3

Choose users

Select which team members should have access. Unselected users will lose access.
4

Save changes

Restrictions take effect immediately. Users without access will no longer see the connection.
Impact on existing queries: If someone has queries using a connection and you remove their access, those queries will fail. Consider the impact before restricting access.

​
Understanding Connection Indicators

Visual cues help you quickly identify connection permissions:
Meaning: Public connectionAll workspace members can see and use this connection. This is the default state for all connections.
Meaning: Restricted accessOnly specific team members can access this connection. Click “Manage sharing” to see who has access.
Meaning: You are the connection ownerAppears in the sharing menu to indicate you created this connection and have full control.
Meaning: You have editor permissionsShown in the sharing menu when someone has granted you editor access to their connection.

​
Troubleshooting Permissions

Possible reasons:
  • The connection is restricted and you don’t have access
  • The connection was archived
  • The connection was deleted
Solution:
  1. Ask the connection owner to grant you access
  2. Contact your workspace owner for access
  3. Create your own connection to the same data source
Meaning: The connection is restricted and you don’t have permission to use it.Solution:
  • Contact the connection owner shown in the “Added by” column
  • Ask your workspace owner to grant you access
Reason: You need to be the connection owner or have editor permissions.Solution:
  1. Contact the connection owner (shown in “Added by”)
  2. Ask them to reconnect or grant you editor permissions
  3. If owner unavailable, contact workspace owner for help
Solution (for workspace owners): 1. Go to the Data Sources page 2. Find connections created by the former team member 3. Reconnect with company credentials to maintain access 4. Update sharing settings as needed 5. Consider replacing connections in queries if necessary
Reason: Only connection owners and workspace owners can change sharing settings.Solution:
  • If it’s not your connection, ask the owner to adjust sharing
  • Workspace owners can override and modify any connection’s settings

​
Security Considerations

Protect sensitive data: Be mindful of who can access connections, especially for connections containing: - Customer personal information - Financial data - Client confidential data - Sensitive business information

​
Security Best Practices

Use restricted access for sensitive client data rather than keeping connections public. Only grant access to team members who actually need it.
Regularly review who has access to your connections: - Click “Manage sharing” on important connections - Remove users who no longer need access - Verify editor permissions are still appropriate
For shared connections, use company email accounts rather than personal emails to ensure continuity if team members leave.
Workspace owners should regularly review workspace membership and remove users who should no longer have access.

​
Next Steps

Now that you understand connection permissions and sharing:
Need help? If you have questions about permissions or connection management, contact [email protected] or use the chat widget in the bottom-right corner.