Audit Access to Individual Project Objects

How to Audit Access in Your Project

The Direct Access view in project settings lets you see all per-object access grants across your project — every user who has been given a direct role on a specific dataset or SAR report.

Prerequisites

• You must be a project Owner (Admin).
• Some direct access rights have been granted to users in the project (otherwise the menu will not appear).

Open the Direct Access View

1. Open your project, and on the top right corner of the page, click on the Users icons to open the Project settings panel on the user management section

2. Click Review Direct Access.

The view shows a list of all direct access granted in the project:

Revoke Individual Access

1. Find the grant you want to revoke.
2. Click the revoke icon on that row.

The user loses their direct access to that specific object.

Note that they may still have access if the user were already part of the project or were added to it after they got direct access. In such case, if you need to completely remove the access of the user to a specific object, you would instead either switch it's role to Deny Access, or remove the user from the project.

Bulk Revoke

Use the filters at the top to narrow down the view, in case you want to bulk revoke access to an individual or to a specific object. The following filters are available:

• Search: Filter by user email or object name.
• Object Type: Show only Datasets, only SAR Reports, or all.
• Role: Show only specific roles.

1. Apply filters to narrow down to the grants you want to remove.
2. Click Revoke all filtered access.