Team ownership entity editing

With the Team ownership entity editing setting, organizations can restrict the ability to edit entities in Cortex to the teams and members who own them without granting generic edit permissions to all users in a workspace. Entity ownership must be defined for the setting to work.

You can also enable edit access to all team members by default.

Entity ownership must be defined to enable team ownership entity editing.

Enable team ownership entity editing

To enable this feature:

1. Go to the Entities > Teams settings page.

2. Toggle on the setting for Team ownership entity editing.

   • By enabling this feature for the workspace, the default user role will be automatically updated and will not include generic permissions for editing entities.

   • Note that the Edit catalogs permission will supersede the Team ownership entity editing feature, so any users assigned a custom role with that permission will be able to continue editing all entities, regardless of ownership. Remove the Configure catalogs permission from the custom role(s) to restrict the ability to edit entities.

   

   In the UI, there are toggles for "Team ownership entity editing" and "Give edit access to all team members"
3. To enable edit access to all members of the team who owns an entity, you can also toggle on the setting Give edit access to all team members.

The Configure catalogs permission supersedes Team ownership entity editing.

Specify team editors

You can also define specific users within a team who can edit owned entities. Note that you cannot specify users if you have enabled the setting Give access to all team members in the Entities settings page.

To do this:

1. Go to the details page for the team you'd like to set editors for. In the upper right corner of the page, click Configure entity.

2. Click the Members tab.

3. Next to the user's name, click the pencil icon.

   
4. In the configuration side panel, toggle on the Editor setting.

   • If a team member does not have an associated Cortex account, they cannot be marked as an editor; the toggle for such users will be grayed out.
5. Click Save.

When you navigate to the team page in Cortex and view the Team members tab, any members who were marked as editors will display with an Editor label. If a team member's identity mapping has not yet been configured, they will not be listed as an Editor here.

Edit a team-owned entity

If a team member is designated as an editor, they can click the Entities tab on the team details page to see all entities that they have permission to edit.

Click the Entities tab on the team details page.

If you have permission to edit an entity, you will see Configure entity in the upper right corner of the entity's details page.

If a user is not an editor of a team, they will not be able to see the Configure entity button for any entities owned by the team or the team itself.

FAQ

Can team editors import entities?

No, team editors can not import entities. To import entities, a user must have the Configure catalog permission, which also gives users the permission to edit ALL entities, not just the ones they own.

Can team editors delete entities they own?

No, team editors can not delete any entities, even if they own them.

Why does a team member not have the Editor label after I enabled edit access to all team members?

This can happen if the team member's identity mapping has not been configured.