Sharing

Siren Investigate provides flexible options for sharing your work with other users. You can control who has access to your graphs and dashboards, and what level of access they have.

Dataspace setup

Permissions defined by object owners may or may not take precedence over role-based permissions, depending on the value of the User sharing composition advanced setting.

The following options are available:

  • Limited by role permissions: Users can restrict access to their objects, but cannot grant permissions that exceed those defined by user roles. This ensures that Dataspace Managers maintain overall control of user actions within the dataspace. This is the default.

  • Override role permissions: Users can freely grant or deny access to their objects, overriding the permissions set by user roles. Choose this option if you trust object owners to manage access to their personal objects responsibly.

Display names

When sharing objects with users, their display names are shown in the sharing interface for easier identification.

If your authentication backend doesn’t provide user info automatically, users themselves can be prompted to set their display name on each login until it has been set. This ensures a better sharing experience by showing meaningful names instead of usernames.

To enable the display name prompt, administrators must set the following in investigate.yml:

investigate_access_control:
  acl:
    allow_display_name_prompt: true

When the prompt is disabled, only usernames will be displayed.

Support for user info retrieval from different authentication schemes is an ongoing process. If your authentication scheme does provide access to user info but they don’t appear in Investigate, please contact the Siren support portal for help.

Sharing methods

  • Share in dataspace - Allow all users in the dataspace to access the object with different permission levels

  • Share with specific users - Grant access to individual users with different permission levels

  • Make objects private - Restrict access to only yourself and administrators

Administrators always have access to all objects, regardless of sharing settings.

For more information on sharing methods, see Sharing with specific users and My objects, Shared with me, and sidebar groups.

Object ownership

Object owners have full control over the object, including the ability to:

  • Share the object with other users

  • Change access levels for shared users

  • Transfer ownership to another user

  • Delete the object