> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pavoai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Superset

> Give Pavo read-only access to your Superset dashboards and charts.

## 2. Superset Access Setup

### Step 1: Confirm Superset URL

Provide us with your Superset instance URL:

* Example: [https://superset.yourcompany.com](https://superset.yourcompany.com)
* Or your internal/VPN URL

### Step 2: Create a Pavo User Account

Create a dedicated user account for Pavo in Superset:

1. Go to Settings → List Users → + Add
2. Fill in:
   1. Username: pavo-integration
   2. Email: [dev@pavoai.com](mailto:dev@pavoai.com) (or your preferred email)
   3. Password: Generate a secure password
3. Click Save

### Step 3: Assign Viewer Role/Permissions

Add the Pavo user to a role with read-only permissions:

Option A: Use built-in "Gamma" role (simplest)

* Assign the Gamma role to the Pavo user
* Gamma provides read-only access to dashboards and charts

Option B: Create custom "Pavo Viewer" role (more control)

| Permission | Resource   | Purpose                                   |
| ---------- | ---------- | ----------------------------------------- |
| can read   | Dashboard  | View all dashboards                       |
| can read   | Chart      | View all charts                           |
| can read   | Dataset    | View dataset definitions                  |
| can read   | SavedQuery | View saved SQL queries                    |
| can read   | Query      | View query history                        |
| can read   | Database   | View database connections (metadata only) |

### Step 4: Enable API Access

Superset supports two authentication methods for API access:

Option A: Username/Password (Basic Auth)

* Simply share the username and password created in Step 2
* We'll authenticate via /api/v1/security/login

Option B: API Token (if enabled)

1. Log in as the Pavo user
2. Go to Settings → User → Security
3. Generate an API token (if available in your Superset version)

### Step 5: Share Superset Credentials

There is an option to upload these details in a file format on the pavo website:

| Field                | Example                                                              | Required |
| -------------------- | -------------------------------------------------------------------- | -------- |
| Superset URL         | [https://superset.yourcompany.com](https://superset.yourcompany.com) | ✅ Yes    |
| Username             | pavo-integration                                                     | ✅ Yes    |
| Password             | (send securely)                                                      | ✅ Yes    |
| API Token (if using) | eyJhbGci...                                                          | Optional |

<Note>
  Security Tip: Please share credentials via a secure channel (e.g., 1Password, encrypted email, or your company's secrets manager).
</Note>

## Security Notes

* All credentials are stored encrypted and are never shared outside of Pavo's secure infrastructure
* We follow the principle of least privilege – we only request the minimum permissions needed
* Access can be revoked at any time by disabling the service principal or user account
* We recommend setting token expiration policies (e.g., 90 days) and rotating credentials periodically