# Sharing and Access Management

**FPT Data Suite** is structured using an **Organization → Workspace** model to ensure separation, manageability, and flexible authorization across user groups and projects:

* **Organization**: Represents the top-level unit in the system (e.g., a company, corporation, or organization). Each Organization can contain multiple Workspaces and manages users at a global level.
* **Workspace**: An independent working environment within an Organization, typically associated with a specific project, product, or functional team. A Workspace helps isolate data, configurations, access rights, and technical components (such as Reports, Data, Pipelines) between different groups within the same organization.

#### Benefits of This Structure

* **Segregate** data and resources by team or project.
* **Manage** users by role at both the Organization and Workspace levels.
* **Support** flexible scaling and operations across multi-team environments.

#### Access Management Mechanisms

The **FPT Data Suite** system supports access control through two main mechanisms:

1. **Role-Based Access Control (RBAC)**\
   Users are assigned roles at either the **Organization** or **Workspace** level. Each role defines specific access rights to functions and resources such as:

   * Viewing/editing Reports
   * Editing Datasets and Data Models
   * Managing Pipelines
   * Configuring system settings

   Common roles include: **Manager**, **Member**, **Viewer**, etc.
2. **Resource Sharing**\
   In addition to RBAC, the system supports **granular sharing** for specific resources (e.g., reports). Users can share resources with individuals or groups, with permissions such as:

   * **Viewer**: View-only access
   * **Member**: Editing access

   This promotes flexible collaboration without altering overall permissions at the Workspace or Organization level.

#### Key Advantages of Combining RBAC and Resource Sharing

* Ensures **secure and precise access control.**
* Enables **flexible collaboration** and efficient information sharing among members and teams.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.datasuite.vn/english/sharing-and-access-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.