Skip to Main Content
Jedox Ideas

Let us know how we can make Jedox even better!

Status Future consideration
Workspace Jedox Platform
Categories Jedox Cloud Jedox Web
Created by Guest
Created on Oct 17, 2023

DB Security for SSO Authorization admins (Azure)

According to the knowledge-base and how things currently work, accessing the DB security (screenshot) within Jedox Cloud is only possible through either the built-in user "admin" or a user which is member of the built-in group "admin". Also access to cube #_USER_GROUP Cube and #_GROUP_DATABASE_DATA is only possible for user group admin.

However, if using the SSO Autorization mode (group memberships administered in Azure), it is not possible to assign access rights to edit these DB security settings. A membership of the role admin (meaning w/o membership to groupo "admin") is not sufficient. This is the only option in the SSO mode though, since granting membership to a group called "admin" or a user called "admin" is (or should) not be possible in Azure.

Allowing a user to use the built-in admin is not a secure option.

Thus, the features, which are unlocked for the user admin should also be unlocked for users with the admin role. Alternatively it should be possible to mark a group to grant

  • ADMIN RESPONSE
    Oct 20, 2023

    Thank you for your great idea. While we cannot commit to a specific target version, we will consider adding it to our future internal backlog. If you can add further information about the context of this feature, please add it here so we can evaluate it more fully.