Skip to main content
  • Identity and RBAC: How e6data controls who can access your platform and what they can do, across the Control Plane and the Compute Plane.
  • Control Plane vs Compute Plane permissions: The two permission grammars in e6data - Control Plane named permissions and Compute Plane resource-and-action rules - and how roles and bindings compose them.
  • Users, groups, and service accounts: How human users, groups, and service accounts are created, synced to workspaces, and managed in e6data.
  • Roles and permissions: The built-in Admin, Manager, and Viewer roles, what each can do, and how to design custom roles in e6data.
  • Personal access tokens and service account keys: The two e6data credential types in detail - personal access tokens and service account keys - their formats and when to use each.
  • Create, use, rotate, and revoke tokens: Create personal access tokens and service account API keys, use them over REST and JDBC/ODBC, set an expiry, rotate, and revoke them.
  • Token security best practices: How to store e6data tokens safely, scope them with least privilege, revoke them, manage them as an admin, and understand what the audit trail records.
  • SSO setup: Connect your identity provider to e6data via SAML 2.0 or OIDC so members sign in with corporate credentials, with just-in-time provisioning.
  • Domain auto-join and JIT provisioning: Let users join your organization automatically by email domain, and provision SSO users just-in-time on first sign-in.
  • TLS certificates: How TLS certificates work for e6data endpoints - Serverless (managed by e6data) vs In-VPC (managed by you).
  • Enable, audit, and block support access: Add, block, unblock, and list e6data Support Users over the API, the permissions required, and how their actions appear in your audit log.
  • Privacy controls: The per-tenant alias model behind e6data Support Users - how identities stay private, how audit history stays correct, and the security guarantees.
Last modified on October 1, 2026