Let's continue to add additional data permissions to the business-analyst persona.
  1. Click on Grant button in the Data permissions window
  2. On the window that pops up, for IAM users and roles drop down select lf-business-analyst, choose tpc for the database and select all the tables except the customer table with Select as the only Table permission
  3. Leave the Grantable permissions unselected and click on the Grant button.
  4. For all the tables selected above, a lf-business-analyst will be able to see all columns.
  5. Let's define the permissions for the lf-campaign-manager persona next.