Configure a usage dashboard for Ask Sigma (Beta)

🚩

This documentation describes a public beta feature and is under construction. This page should not be considered part of our published documentation until this notice, and the corresponding Beta flag on the feature in the Sigma service, are removed. As with any beta feature, the feature discussed below is subject to quick, iterative changes. The latest experience in the Sigma service might differ from the contents of this document.

Beta features are subject to the Beta features disclaimer.

Admins can configure a usage dashboard to view data about how Ask Sigma is used in their Sigma organization.

Data security

Ask Sigma usage is not visible in usage dashboards or audit logs, and requires separate configuration to ensure data security.

Because this data includes names of users and the full text of the questions they ask, Sigma recommends configuring a unique schema to store this data in your warehouse and granting view privileges to that schema to only the admins who should be able to see this data.

Requirements

• You must be assigned the Admin account type.
• You must have a Sigma connection to Snowflake, Databricks, or BigQuery with write access enabled.
• You must have permissions in Snowflake, Databricks, or BigQuery to create the writable destination and configure appropriate access.

Configure a destination in your warehouse to store Ask Sigma usage data

The following sections contain example instructions for how to create a location in your data platform to store usage data and set up the permissions so that all users can write data to that location, but only your admins can view the data. This schema can't be the same as the write-back schema configured during your connection set up.

📘

Sigma Computing, Inc. does not store this data or have the ability to access it.

Follow the instructions that match the data platform connection you are using to store and secure your Ask Sigma usage data.

• Create a schema in Snowflake
• Create a schema in Databricks
• Create a dataset in BigQuery

Create a schema in Snowflake

-- Create the database  
CREATE DATABASE IF NOT EXISTS ask;

-- Create the schema  
CREATE SCHEMA IF NOT EXISTS ask.ask_admin;

-- Grant usage on the database to the role  
GRANT USAGE ON DATABASE ask TO ROLE ask_admin_role;

-- Grant usage on the schema to the role  
GRANT USAGE ON SCHEMA ask.ask_admin TO ROLE ask_admin_role;

-- Grant create table privilege on the schema to the role  
GRANT CREATE VIEW ON SCHEMA ask.ask_admin TO ROLE ask_admin_role;

Create a schema in Databricks

-- Create the catalog  
CREATE CATALOG IF NOT EXISTS ask;

-- Create the schema inside the catalog  
CREATE SCHEMA IF NOT EXISTS ask.ask_admin;

-- Grant usage on the catalog to the group  
GRANT USE CATALOG ON CATALOG ask TO `ask_admin_role`;

-- Grant usage on the schema to the group  
GRANT USE SCHEMA ON SCHEMA ask.ask_admin TO `ask_admin_role`;

-- Grant permission to create tables in the schema  
GRANT CREATE VIEW ON SCHEMA ask.ask_admin TO `ask_admin_role`;

Create a dataset in BigQuery

# Grant roles/bigquery.dataViewer to allow usage of the dataset

bq update --dataset --add_iam_member  
  "dataset_id=your-project-id:ask_ask_admin"  
  "member=role:ask_admin_role"  
  "role=roles/bigquery.dataViewer"

# Grant roles/bigquery.dataEditor to allow creating tables

bq update --dataset --add_iam_member  
  "dataset_id=your-project-id:ask_ask_admin"  
  "member=role:ask_admin_role"  
  "role=roles/bigquery.dataEditor"

Configure your Ask Sigma usage view

After you have prepared your write destination in your data platform, configure your Ask Sigma usage view in the Administration portal.

1. Go to Administration > AI Settings:
   1. In the Sigma header, click your user avatar to open the user menu.
   2. Select Administration to open the Administration portal.
   3. In the side panel, select AI Settings.
2. In the Connection field, select a connection that has write access to input tables.
3. Depending on the connection type, additional fields appear to prompt you to enter the details of the writable destination you configured in your data platform.
4. Click Create.

If you see the error "Cannot manage views on given scope with the following error: SQL access control error: Insufficient privileges to operate on schema 'your_schema_name' ", it means that the schema (Snowflake or Databricks) or dataset (BigQuery) you entered is not configured correctly to allow write access. See Configure a destination in your warehouse to store Ask Sigma usage data and ensure your writable destination in your data platform is configured correctly.