OHDSI Home | Forums | Wiki | Github

Web api authorization whne using multiple data sources

Implementers
#1

Hello,

I am in the process of setting up WebAPI and Atlas within our local data center. I plan to incorporate multiple data sources, each requiring specific user groups authorized for access. Is it feasible to set up user access so that upon logging into Atlas, a user can view only the data sources they have been granted permission to access?

Thank you.
Alla

#2

Yes, after you add a data source you can assign specific users access. Unfortunately, I haven’t found a way to do it at the group level.

#3

You can import based on groups, you’d need to set this up in the Configuration section, then click on “Import Users from LDAP/Active Directory” to set up a job in which you can map roles to security groups and have it run on a recurring basis.

#4

I setup a New Role with the exact permissions I need for a certain group of users:

Screenshot 2024-01-02 at 7.40.31 PM
Screenshot 2024-01-02 at 7.40.31 PM2281×752 89.7 KB

Then I specify the granularity of permissions for the role:

Screenshot 2024-01-02 at 7.40.48 PM
Screenshot 2024-01-02 at 7.40.48 PM2266×1355 329 KB

And as new users or groups of users are added, I can set the user roles based on that group:

Screenshot 2024-01-02 at 7.46.05 PM
Screenshot 2024-01-02 at 7.46.05 PM741×719 40.7 KB

Hope that helps.

#5

Yes, it does help. But how do I add a new user in OHDSI on AWS?
Your help is greatly appreciated

#6

Hi @Sanjay_Udoshi I already have a set of users. They are assigned some of the default Atlas roles.

  1. How can I see which roles are assigned to these users, what permissions do they have?
  2. Can I edit a role?
  3. How can I remove a user from the group?
  4. How can I delete a role?

Is there documentation on user management in Atlas?

Thank you.
Alla

t