Access and roles
Access is tied to roles and positions, never to named individuals. Requests need a business case and two approvals: the department data steward, then the Office of Data and Innovation. Sign in through City SSO with MFA.
Role hierarchy
| Role | Inherits from | Scope | Can do |
|---|---|---|---|
| R1 CDR Administrator | All | Platform configuration, role administration, cost controls. | |
| R2 Data Engineer | R1 | All | Pipelines, mappings, quarantine review; no access to masked columns. |
| R3 Department Data Steward | R2 | Own department | Approves access for the department; resolves data quality issues. |
| R4 Department Analyst | R3 | Own department | Reads curated and cleansed tables for the department; builds reports. |
| R5 Department Viewer | R4 | Own department | Reads department views and dashboards only. |
| R6 Executive Viewer | All departments, summary only | City Manager's office: dashboards and metrics, no record detail. | |
| R7 Public Safety Analyst | R4 | Police and Fire | CAD incident summaries; never individual criminal justice information. |
Security policies
| Policy | Kind | Object | Rule | Applies to |
|---|---|---|---|---|
| P-01 | Row level | All curated facts | dept_code = the department on the user's role assignment | R3, R4, R5 |
| P-02 | Row level | curated.fact_cad_incident | agency in ('SLPD','SLFD') for Public Safety Analyst; none for other departments | R7 |
| P-03 | Column level | curated.dim_employee | dm8_race_ethnicity, std_sex and age visible to HR steward and analyst only | R3, R4 (HR) |
| P-04 | Dynamic masking | curated.fact_utility_bill | account_id shown as UB-***### outside Utilities | All except Utilities |
| P-05 | Dynamic masking | curated.fact_service_request | address generalized to block for viewers | R5, R6 |
| P-06 | Classification | Columns tagged Confidential or Restricted | Excluded from exports and from the public open data feed | All |
| P-07 | Aggregation threshold | Demographic summaries | Counts under 5 are suppressed | All |
Access requests
| Request | Role requested | Department | Position | Business case | Requested | Department approval | Office of Data and Innovation | Status |
|---|---|---|---|---|---|---|---|---|
| AR-0412 | Department Analyst | Utilities | Utilities Analyst (position 4410) | Monthly water loss and main break reporting moves from Excel extracts to the CDR. | 2026-10-27 09:14 | Brandon Hayes 2026-10-27 15:02 |
Marisol Ortega 2026-10-28 08:40 |
Provisioned |
Provisioning adds the position's account to the City directory group for the role (for example CDR-UTL-Analyst). Quarterly access reviews are run by each steward; removals follow HR separation within one business day.
Data as of run R-20261111-0200, finished 11/11/2026 02:13 Central. Curated layer: curated schema.