Manage org tags

Overview

Slingshot utilizes a permission-enabled tag called Org to represent your organizational hierarchy. The org tag contains two levels: parent org and child units. Orgs are used for both access control and cost attribution.

  • For access control, when a role is assigned to the parent org, the role has access to all of its child units.
  • For cost attribution, when an object is assigned to a child org, the cost rolls up to the parent org.

Admins can manage orgs from the Slingshot tags > Manage tags screen.

Roles for managing orgs

  • View and manage parent orgs
    • Tenant admin
  • View and manage child units
    • Tenant admin
    • Snowflake admin of a parent org

Default org tag

  • All objects will be assigned to a default org when first onboarded into Slingshot.
  • The default org tag is a system-generated, read-only tag.
    ℹ️
    The only roles that will automatically get access to the objects assigned to the default org tag are the Tenant admin and Snowflake admin.

Requirements for org names

  • The names of all orgs (parent and child) must be unique.
  • The name of any org has a max character length of 255.
  • The name of any org must only contain alphanumeric characters or the special characters _ and - with no spaces.

Manage orgs

To access the Manage Slingshot Tags screen:

  1. Select Configurations at the bottom of the left navigation menu.
  2. On the Slingshot tags card, select Manage tags.
    tags

Create orgs

To create an org:

  1. On the Manage tags page, select Add Org.
  2. Type an org name.
  3. Click Save.

Create org units

To create an child unit of an org:

  1. Expand an existing org.
  2. Click Add unit.
  3. Type a unit name.
  4. Click Save.
    ℹ️

    Admins of a parent org will be auto-assigned to newly created child units.

Rename orgs/units

To rename an org/unit:

  1. Select the pencil icon next to the existing org/unit.
  2. Edit the name.
  3. Click Save.

Delete orgs

⚠️
Deleting orgs/units unassigns any users and LDAP groups from the org.
  1. On the Manage tags page, select the trash can icon next to the tag.
    A confirmation dialog displays.
  2. Select Delete.
    ℹ️
    In order to delete an org/unit, you must first reassign any objects that are currently assigned to that org/unit.