Self-Service versus Governed
Balancing analyst autonomy against consistency — resolved by tiers and enforced definitions rather than by restricting access.
Definition
The tension between letting people answer their own questions and ensuring the answers are consistent and correct.
Why restriction fails
Restricting access does not remove the need for the analysis; it relocates it. The analyst extracts to a spreadsheet, computes there, and the result has no governance at all — no lineage, no versioning, no access control, and it is emailed to people who treat it as authoritative.
The governed platform loses visibility of exactly the analysis it was trying to govern.
The resolution: tiers, not gates
Tier 1 — certified. Metrics and datasets with an owner, tested definitions, monitored freshness and quality. Used for board reporting, regulatory submissions and operational decisions. Changes are managed.
Tier 2 — curated. Cleaned and modelled datasets, documented, without the guarantees of tier 1. Suitable for most analysis.
Tier 3 — raw and exploratory. Anything, available to those who understand it. No guarantees, clearly labelled.
Analysts work freely in tiers 2 and 3. The rule is simply that anything presented as an official number must come from tier 1 — which is a labelling requirement rather than an access restriction.
What makes it work
- The certified path must be the easiest path for common questions. If getting a governed number takes three days and computing it yourself takes an hour, people will compute it themselves.
- Promotion path from exploratory to certified, so a useful analysis can graduate rather than remaining unofficial forever.
- Clear labelling in the tools themselves, so a consumer can see which tier a number came from without asking.
- Lineage everywhere, so any number can be traced.
The signal that the balance is wrong
Shadow analysis. Spreadsheets circulating with numbers nobody can trace. That is not a discipline problem; it is evidence that the governed path did not serve a real need — the same signal as teams routing around an internal platform.
Failure scenarios
- Access restricted, producing ungoverned spreadsheets.
- Everything certified, so certification means nothing and the backlog is permanent.
- No promotion path, so useful analysis stays unofficial.
- Tiers invisible in the tools, so consumers cannot tell what they are looking at.
Interview question
"How do you let analysts work freely without ending up with five conflicting versions of the same number?"