https://datacaffe.ai/assets/SecureDataAccessBestPractices-BIk03WwC.js

1import{e as s,j as e}from"./index-BT7UW705.js";const t=()=>(s.useEffect(()=>{window.scrollTo(0,0)},[]),e.jsxs("div",{className:"bg-gray-50 font-sans mt-24 leading-normal tracking-normal",children:[e.jsxs("div",{className:"text-sm pt-7 text-gray-400 container max-w-7xl mx-auto px-4 sm:px-6 lg:px-8",children:[e.jsx("a",{href:"/helpcenter",className:"hover:underline",children:"Help Center"}),e.jsx("span",{className:"mx-2",children:">"}),e.jsx("a",{href:"/helpcenter/gettingstarted",className:"hover:underline",children:"Getting Started"}),e.jsx("span",{className:"mx-2",children:">"}),e.jsx("span",{className:"font-medium text-gray-700",children:"Best Practices for Secure Data Access"})]}),e.jsx("div",{className:"container max-w-4xl mx-auto py-8 px-4 sm:px-6 lg:px-8",children:e.jsxs("article",{className:"bg-white rounded-xl shadow-lg p-8 md:p-12",children:[e.jsxs("header",{className:"mb-8 border-b pb-6",children:[e.jsx("h1",{className:"font-bold text-[#014bad] mb-2",style:{fontSize:"32px",lineHeight:1.3},children:"Best Practices for Secure Data Access in DataCaffe"}),e.jsx("p",{className:"typography-default text-gray-700",children:"Security is not an add-on — it's a core value. In DataCaffe, securing your data and keeping it accessible to the intended users is designed into every aspect of the platform. From collaborating on sensitive business metrics or working across teams, these best practices ensure that your dashboards and datasets are shared safely, responsibly, and with complete control."})]}),e.jsxs("section",{className:"space-y-12",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"1. Use Role-Based Access Control (RBAC)"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"Roles are the starting point to grant access. DataCaffe has built-in role-based access control, which lets you define precisely who has access to view, edit, or manage a given dashboard or workspace. [15, 25] This method restricts system access to authorized users based on their roles within an organization. [15, 23]"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsxs("li",{children:[e.jsx("span",{className:"font-bold text-gray-900",children:"Viewer:"})," Can see dashboards and use filters"]}),e.jsxs("li",{children:[e.jsx("span",{className:"font-bold text-gray-900",children:"Editor:"})," Can create and modify dashboards and visualizations"]}),e.jsxs("li",{children:[e.jsx("span",{className:"font-bold text-gray-900",children:"Admin:"})," Can administer all content, users, and settings"]})]}),e.jsx("div",{className:"mt-6 bg-blue-50 border-l-4 border-blue-500 text-blue-800 p-4 rounded-r-lg",children:e.jsxs("p",{children:[e.jsx("span",{className:"font-bold",children:"Tip:"})," Grant roles based on function, not rank — only grant editing privileges to people who actually need it."]})})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"2. Make Dashboards Private by Default"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"All DataCaffe dashboards are private initially. Only you (and other admins) can view it until you make the conscious decision to share it with others."}),e.jsx("h3",{className:"h3 font-semibold text-gray-800 mb-2",children:"Best practice:"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"✅ Publish only when ready"}),e.jsx("li",{children:"✅ Share with explicit users or groups"}),e.jsx("li",{children:'✅ Refrain from wide "everyone" sharing unless absolutely necessary'})]})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"3. Use Granular Sharing Controls"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"Share, yes, but share wisely. In DataCaffe, you can:"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"Select between view and edit permissions"}),e.jsx("li",{children:"Share with individuals, teams, or across your workspace"}),e.jsx("li",{children:"Revoke access on the spot if necessary"}),e.jsx("li",{children:"See and control sharing history"})]}),e.jsx("p",{className:"typography-default text-gray-700 mt-4",children:"This keeps everyone from seeing more than they require — nothing unnecessary."})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"4. Utilize Data Source Permissions Independently"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"Dashboard view does not automatically constitute access to the underlying data source. [30] DataCaffe allows you to control data access separately, so only the right users can:"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"Query live datasets"}),e.jsx("li",{children:"View sensitive tables or metrics"}),e.jsx("li",{children:"Change data connectors or schemas"})]}),e.jsx("p",{className:"typography-default text-gray-700 mt-4",children:"Use both dashboard-level sharing and source-level permissions for c

1omplete security."})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"5. Support Encryption and Safe Connections"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"DataCaffe adheres to the latest security guidelines to ensure your data remains secure:"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"Encryption at rest and in transit with TLS/SSL protocols. [27] Data at rest refers to inactive data stored on a device, while data in transit is actively moving between devices or networks. [18, 14]"}),e.jsx("li",{children:"Tokenized authentication and secure API processing"}),e.jsx("li",{children:"Support for SSO and identity providers (such as Google, Azure AD) out of the box"})]}),e.jsx("p",{className:"typography-default text-gray-700 mt-4",children:"Your data is safe no matter where it originates or flows in the pipeline."})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"6. Deploy Row-Level Security (RLS) (Coming Soon)"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"In the near future, DataCaffe will have Row-Level Security enabled so that you can:"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"Dynamically filter data by the user. [9]"}),e.jsx("li",{children:"Have one dashboard that displays various views to various roles"}),e.jsx("li",{children:"Limit access without recreating dashboards or datasets. [2, 4]"})]}),e.jsx("p",{className:"typography-default text-gray-700 mt-4",children:"This is particularly important for use cases such as sales territories, departmental KPIs, or client dashboards."})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"7. Audit, Review, and Update Frequently"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:`Security isn't "set it and forget it." Tighten your access rules by:`}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"Quarterly reviewing permissions. [29] Regular audits help identify vulnerabilities and ensure compliance with regulations. [16, 17]"}),e.jsx("li",{children:"Deleting inactive users or obsolete teams"}),e.jsx("li",{children:"Trailing dashboard usage to identify suspicious behavior"}),e.jsx("li",{children:"Enforcing good password and MFA policy through your identity provider"})]})]}),e.jsxs("div",{children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"8. Educate Your Team on Security Fundamentals"}),e.jsx("p",{className:"typography-default text-gray-700 mb-4",children:"Human error is one of the major sources of data breaches. [5] Ensure your team knows:"}),e.jsxs("ul",{className:"list-disc typography-default list-inside space-y-3 text-gray-700",children:[e.jsx("li",{children:"Not to over-share dashboards"}),e.jsx("li",{children:"How to apply filters and calculated fields without sharing sensitive values"}),e.jsx("li",{children:"How to alert suspicious access or unexpected data alterations. [28]"})]}),e.jsx("p",{className:"typography-default text-gray-700 mt-4",children:"Even the greatest security tools require educated users behind them."})]})]}),e.jsxs("footer",{className:"mt-12 border-t pt-8",children:[e.jsx("h2",{className:"h3 font-semibold text-gray-900 mb-4",children:"✅ At a Glance"}),e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"min-w-full bg-white",children:[e.jsx("thead",{className:"bg-gray-200 text-gray-600 uppercase text-sm leading-normal",children:e.jsxs("tr",{children:[e.jsx("th",{className:"py-3 px-6 text-left",children:"Best Practice"}),e.jsx("th",{className:"py-3 px-6 text-left",children:"Why It Matters"})]})}),e.jsxs("tbody",{className:"text-gray-600 text-sm font-light",children:[e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Role-Based Access"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Right individuals only can edit or view content"})]}),e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Private Dashboards"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Avoid accidental exposure of in-work or sensitive information"})]}),e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Separate Data & Dashboard Permissions"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Imposes tighter control over live sources"})]}),e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Encryption & Secure APIs"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Protect data while transferring and storing"})]}),e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Row-Level Security"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Customize dashboards without copying them"})]}),e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Regular Audits"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Remove stale or risky access settings"})]}),e.jsxs("tr",{className:"border-b border-gray-200 hover:bg-gray-100",children:[e.jsx("td",{className:"py-3 px-6 text-left whitespace-nowrap",children:"Team Training"}),e.jsx("td",{className:"py-3 px-6 text-left",children:"Avoid human error breaches"})]})]})]})}),e.jsx("p",{className:"typography-default text-gray-700 mt-8",children:"Security is a shared responsibility. With these best practices in place, you’ll ensure your organization uses DataCaffe safely, effectively, and with complete confidence."}),e.jsxs("p",{className:"typography-default text-gray-700 mt-4",children:["Need help setting up access templates or auditing your workspace? ",e.jsx("a",{href:"/contactus",className:"text-blue-600 hover:text-blue-800 font-medium underline",children:"Contact our support team →"})]})]})]})})]}));export{t as default};