> For the complete documentation index, see [llms.txt](https://docs.datasuite.vn/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.datasuite.vn/english/sharing-and-access-management.md).

# Sharing and Access Management

**FPT Data Suite** is structured using an **Organization → Workspace** model to ensure separation, manageability, and flexible authorization across user groups and projects:

* **Organization**: Represents the top-level unit in the system (e.g., a company, corporation, or organization). Each Organization can contain multiple Workspaces and manages users at a global level.
* **Workspace**: An independent working environment within an Organization, typically associated with a specific project, product, or functional team. A Workspace helps isolate data, configurations, access rights, and technical components (such as Reports, Data, Pipelines) between different groups within the same organization.

#### Benefits of This Structure

* **Segregate** data and resources by team or project.
* **Manage** users by role at both the Organization and Workspace levels.
* **Support** flexible scaling and operations across multi-team environments.

#### Access Management Mechanisms

The **FPT Data Suite** system supports access control through two main mechanisms:

1. **Role-Based Access Control (RBAC)**\
   Users are assigned roles at either the **Organization** or **Workspace** level. Each role defines specific access rights to functions and resources such as:

   * Viewing/editing Reports
   * Editing Datasets and Data Models
   * Managing Pipelines
   * Configuring system settings

   Common roles include: **Manager**, **Member**, **Viewer**, etc.
2. **Resource Sharing**\
   In addition to RBAC, the system supports **granular sharing** for specific resources (e.g., reports). Users can share resources with individuals or groups, with permissions such as:

   * **Viewer**: View-only access
   * **Member**: Editing access

   This promotes flexible collaboration without altering overall permissions at the Workspace or Organization level.

#### Key Advantages of Combining RBAC and Resource Sharing

* Ensures **secure and precise access control.**
* Enables **flexible collaboration** and efficient information sharing among members and teams.