Export environments
Last updated
Was this helpful?
Last updated
Was this helpful?
For restricted data, you'll often want to to whether users can move data off of Redivis and onto external systems. For example, you may want researchers to be able to download data to a compute cluster for further analysis, but not onto their personal computer.
In this section of your organization settings, you can define specific export environments that can then be applied to datasets.
All export environments are given a unique name and optional description, which can be helpful for users to understand the context for what the environment is and when it applies. You can then specify the type of environment and any accompanying rules:
Specify any number of IP addresses (or subnets, using CIDR notation) that represent the export environment. For example, if your on-premise cluster has persistent IP address(es), they would be listed here.
To allow users to download small outputs without requiring administrator approval, you can create an IP Address environment with the wildcard IP address 0.0.0.0/0 and turn on the Export size toggle, setting it to an appropriate limit (e.g., 10MB = 0.01GB).
This is often helpful so that users can export final figures without requiring administrator intervention. Note that there is no guarantee that the content being exported within this size limit is actually a final, aggregate figure – this requires a certain degree of trust in users, and may not be appropariate for all datasets. However, all exports are logged, which can help to prevent and audit against suspect behavior.
Specify specific Google Cloud project(s) to which BigQuery exports are allowed.
Specify specific Google Cloud Storage buckets(s) to which exports are allowed.
Allow data to be used within Google Data Studio dashboards.
A "catch-all" environment, the custom location allows for researchers to request export on a case-by-case basis. For example, if they want to export a specific table to a given GCS bucket, or to a specific IP address, they'll be able to make this request which will then be sent to administrators for approval.
By default, any exports to the specified environment will be permitted (assuming the environment is assigned to a given dataset). However, you can specify additional rules associated with the environment to allow fine-grained control:
If this rule is turned on, every export to the specified environment must first be approved by an administrator.
Export size
If enabled, only exports above the specified size will require administrator approval. The size can be specified in terms of gigabytes (GB) or number of rows in the exported table.
