🔒 Governed mode
Previously, workspace admins could restrict the data available to the Hex agent for Explorers by enabling Endorsed mode, which limited access to tables, models, and projects marked as “Endorsed.”
Governed mode takes things one step further and lets admins define their own rules for which data sources the Hex agent can access for Explorers, rather than relying solely on the “Endorsed” classification.
Some ways to set it up:
- Semantic models only: Have the agent answer using only your defined metrics, without querying warehouse tables directly or exploring projects.
- Projects only: Have the agent use dashboards and analyses your team has already built. It can run projects and change inputs, but won’t write new warehouse queries.
- A custom mix of sources: For example, you could use all semantic models, only warehouse tables marked Gold, and only projects marked Certified or Trusted.
Already using Endorsed mode? Nothing changes. Your settings carry over as a Governed mode configuration that allows only endorsed data.
Governed mode controls what the agent uses, not what people can access. Anyone with access to a data connection can still query it directly. To restrict data access, set permissions in your warehouse.
Admins can set up Governed mode in Settings > Governed mode.