> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nx1cloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a data shares credential

> Create a Gravitino data shares credential in NexusOne to securely share datasets across tenants.

The data shares credential feature uses Gravitino to allow you to share a dataset
across NexusOne tenants.

## Prerequisites

* Two deployed NexusOne tenants
* Appropriate permission: `nx1-tenant-admin`,`nx1_catalog_admin`, `nx1_s3_admin`, `ranger-admin`,
  `superset_user`, `spark_sql`, and `trino_admin`
* A previously ingested dataset

## Create a data shares credential in a provider tenant

Perform these steps to create a data shares credential.

1. Log in to NexusOne in the provider tenant.
2. On the top navigation bar, hover your mouse over **Platform** and then select
   **Data Shares Credential**.
3. Click the plus sign to create a client.
4. In the **Client Name** field, enter a client name and then click **Create**.
   NexusOne appends `gravitino-shared` to the client's name.

## Access datasets in a provider tenant from a consumer tenant

To access datasets in a provider tenant from a consumer tenant, you must configure a catalog
in the consumer tenant. Perform these steps to configure the catalog.

1. Log in to NexusOne in the consumer tenant.
2. On the top navigation bar, hover your mouse over **Catalog & Models**, and then select **Catalogs**.
3. Click the plus sign to create a catalog.
4. In the **Name** field, enter a catalog name.
5. For the **Catalog Type**, select **Iceberg**.
6. Configure the connection by entering values for the following key fields:
   * `iceberg.catalog.type`: Catalog implementation type, such as REST or Hive
   * `iceberg.rest-catalog.uri`: The REST Catalog URL
   * `iceberg.rest-catalog.oauth2.credential`: OAuth 2.0 client credential
   * `iceberg.rest-catalog.oauth2.server-uri`: OAuth 2.0 authorization server URL
   * `iceberg.rest-catalog.vended-credentials-enabled`: Controls whether you get temporary and automatically
     issued access credentials
7. Click **Create**.

Once the consumer tenant saves the catalog configuration, the NexusOne platform automatically
provisions this new shared catalog. NexusOne then attaches this shared catalog to the consumer
tenant's [Spark](/platform-components/apache-spark/spark-in-nx1) and [Trino](/platform-components/trino/trino-in-nx1)
data processing engines. Afterward, the shared catalog becomes immediately visible and ready
so you can use it in a query workload or in NexusOne portal features, such as **Ask** or **Quality**.

## Additional resources

For more information about the Gravitino data shares credential feature,
refer to [Data shares credential](/documentation/platform/overview/data-shares-credential).