# Setting up watsonx\.governance #

You can set up watsonx\.governance to monitor model assets in your IBM watsonx projects or deployment spaces\. To set up watsonx\.governance, you can manage users and roles for your organization to control access to your projects or deployment spaces\.

To set up watsonx\.governance, complete the following tasks:

<!-- <ul> -->

 *  [Creating access policies](https://dataplatform.cloud.ibm.com/docs/content/wsj/model/wos-setup-wos.html?context=cdpaas&locale=en#wos-access-policies)
 *  [Managing users and roles](https://dataplatform.cloud.ibm.com/docs/content/wsj/model/wos-setup-wos.html?context=cdpaas&locale=en#wos-users-wx)

<!-- </ul> -->

## Creating access policies ##

You can complete the following steps to invite users to an IBM Cloud account that has a watsonx\.governance instance installed and assign service access\.

**Required roles** : Users must have have the **Reader**, **Writer**, or higher IBM Cloud IAM Platform roles for service access\. Users that are assigned the **Writer** role or higher can access information across projects and deployment spaces in watsonx\.governance\.

<!-- <ol> -->

1.  From the IBM Cloud homepage, click **Manage > Access (IAM)**\.
2.  From the IAM dashboard, click **Users** and select **Invite user**\.
3.  Complete the following fields:
    
    <!-- <ul> -->
    
     *  *How do you want to assign access?* : `Access policy`.
     *  *Which service do you want to assign access to?* : `watsonx.governance` and click **Next**.
     *  *How do you want to scope the access* : Select the scope of access for users and click **Next**.
        
        <!-- <ul> -->
        
         *  If you select **Specific resources**, select an attribute type and specify a value for each condition that you add.
         *  If you select **Service instance** in the *Attribute type* list, specify your instance in the *Value* field.
        
        <!-- </ul> -->
        
    <!-- </ul> -->
    
4.  If you have multiple instances, you must find the data mart ID to specify the instance that you want to assign users access to\. You can use one of the following methods to find the data mart ID:
    
    <!-- <ul> -->
    
     *  On the **Insights** dashboard, click a model deployment tile and go to **Actions > View model information** to find the data mart ID.
     *  On the **Insights** dashboard, click the navigation menu on a model deployment tile and select **Configure monitors**. Then, go to the **Endpoints** tab and find the data mart ID in the **Integration details** section of the **Model information** tab.
    
    <!-- </ul> -->
    
5.  Select the **Reader** role in the **Service access** list\.
6.  Assign access to users\.
    
    <!-- <ul> -->
    
     *  If you are assigning access to new users, click **Add**, and then click **Invite** in the *Access summary* pane.
     *  If you are assigning access to existing users, click **Add**, and then click **Assign** in the *Access summary* pane.
    
    <!-- </ul> -->
    
<!-- </ol> -->

## watsonx\.governance users and roles ##

You can assign roles to watsonx\.governance users to collaborate on model evaluations in [projects](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/collaborate.html#add-collaborators) and [deployment spaces](https://dataplatform.cloud.ibm.com/docs/content/wsj/analyze-data/collaborator-permissions-wml.html#adding-collaborators)\.

The following table lists permissions for roles that you can assign for access to evaluations\. The **Operator** and **Viewer** roles are equivalent\.

<!-- <table "class="comparison-table" "> -->

Table 1\. Operations by role  
The first row of the table describes separate roles that you can choose from when creating a user\. Each column provides a checkmark in the role category for the capability associated with that role\.

| Operations                                             | Admin role | Editor role | Viewer/Operator role |
|:------------------------------------------------------ |:----------:|:-----------:|:--------------------:|
| Evaluation                                             |     ✔      |      ✔      |                      |
| View evaluation result                                 |     ✔      |      ✔      |          ✔           |
| Configure monitoring condition                         |     ✔      |      ✔      |                      |
| View monitoring condition                              |     ✔      |      ✔      |          ✔           |
| Upload training data CSV file in model risk management |     ✔      |      ✔      |                      |

<!-- </table "class="comparison-table" "> -->

**Parent topic:**[Setting up the platform for administrators](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/setup-platform.html)

<!-- </article "role="article" "> -->