PushMetrics uses a layered permissions model that lets you control who can access your reports, notebooks, database connections, and integrations.
Default Access
Every report, notebook, database connection, and integration you create is private by default — only you and workspace admins can access it.
Sharing Options
Click the Share button in the top-right corner of a report or notebook to open the sharing menu:
The sharing dialog has the following options:
Everyone in your workspace
Toggle this on to grant access to all users in your workspace. You can choose the permission level (view, use, or edit) from the dropdown.
Share with group
Search for and select pre-defined user groups for team-based access control. Groups can be managed by admins.
Invite individual users
Search for existing users or invite new ones by email. Each user can be assigned a different permission level. Invited users receive an email notification.
Note: Share underlying database connections with workspace or users in order for them to view and query SQL data.
Copy link
Copies a direct link to the item. Only people with access to the report can open the link.
Permission Levels
PushMetrics has three permission levels, each building on the previous:
| Permission | What it allows |
|---|---|
| Can view | See the item and its contents (read-only) |
| Can use | Everything in view, plus execute reports/queries and use database connections or integrations in blocks |
| Can edit | Everything in use, plus modify the item and manage its sharing settings |
Permissions are hierarchical: edit includes use, which includes view.
What Can Be Shared
| Resource | View | Use | Edit |
|---|---|---|---|
| Reports & Notebooks | See content and results | Execute and run | Modify blocks, settings, sharing |
| Database Connections | See the connection exists | Run queries against it | Modify connection settings |
| Integrations (Slack, Tableau, etc.) | See the integration exists | Use it in blocks | Modify configuration |
Sharing Reports vs. Database Connections
Reports and database connections have separate permissions. Sharing a report does not automatically grant access to the database connections used in it.
If a collaborator needs to both view and execute a report, you must share:
- The report (with at least can use permission)
- The database connection(s) used in the report (with at least can use permission)
PushMetrics will prompt you to share the relevant databases when you invite someone to a report who doesn't have access to them yet.
User Roles
There are three account-level roles that determine what a user can do across the workspace. See User Management for details.
| Role | Create content | Access shared content | Access all content | Manage users |
|---|---|---|---|---|
| Admin | Yes | Yes | Yes (all items) | Yes |
| User | Yes | Yes (shared items) | No | Can invite |
| Guest | No | Yes (shared items) | No | No |
Admins always have full access to every resource in the workspace, regardless of sharing settings.
Workspace Isolation
All sharing and permissions are scoped to a single workspace. Users can belong to multiple workspaces but have separate roles and access in each one. Sharing a report in one workspace does not affect any other workspace.