Troubleshooting & FAQ

Access and permissions

I can't see a datasource or table that a colleague can see.

VDA filters everything by your effective role permissions. If your role isn't allowed to view a resource, it is hidden or masked. Ask an administrator to check your role's rules in Access Management. They can use the Access Simulator & Audit tab to see exactly why access is allowed or denied. See Access Control & PBAC Governance.

Some columns are missing or masked in a data preview.

Columns tagged as PII, or restricted by a PBAC deny rule, are automatically masked or removed from previews, chart exports, and Text-to-SQL results for users without explicit unmasking privileges. See PII & Named Entity Recognition.

My query was blocked with an \"Access Denied\" message.

Queries are checked before they run. A query can be denied if it references a restricted column directly, or if it uses SELECT * (or t.*) on a table that has restricted columns. Select only the columns you need. The simulator shows the exact rule that applied. See SQL Security Firewall.

Text-to-SQL

Does my data leave our network when I use Text-to-SQL?

That depends on the model tier your administrators configure. The local tier uses self-hosted models inside your perimeter, so no prompts or data samples leave your infrastructure. See Dual-Tier AI Model Architecture.

API keys and AI agents

I lost my API key.

The full key is shown only once, when it is created, and only a hash is stored. Generate a new key and revoke the old one. See MCP & AI Agent Integration.

Claude Desktop or Cursor can't connect to VDA.

Check that the key is valid and has not expired or been revoked, and that the MCP URL is correct. Keys carry the permissions of the user who created them, so a tool may be missing from the agent's list because your role isn't allowed to use it. See Dual-Layer Security & Dynamic Tool Filtering.

Still stuck?

See Support for what to include in a support request.