Basic and Security Roles Guideline
These guidelines help you configure the two predefined roles, Basic and Security, with the right permissions for each type of user. They build on the general role setup described in Create roles and add permissions.
| Role | Assigned to |
|---|---|
| Basic | Users who access existing reports, dashboards, and views, and who may create their own. No administrative access or global configuration changes. |
| Security | Administrators and super-users who manage data models, OLAP cubes, distribution jobs, and environment configurations. |
tip
Assign each role to a test account and verify that the permissions match only what's expected before applying them to real users.
Configure the basic and security roles
- In the navigation panel, select the gear icon to open the Administration section.
- Select Security, then Roles.
- In the Manage dropdown, select General Roles or Data Model Roles.
- Select the Basic or Security role.
- Check or uncheck the recommended permissions from the tables below.
- Click Apply Changes.
General roles recommended permissions
Administration
| Permission | Basic | Security |
|---|---|---|
| Manage Security | ✓ | |
| Manage Global Parameters | ✓ | |
| Manage Global Variables | ✓ | |
| Manage Distribution | ✓ | |
| Manage External Locations | ✓ | |
| Manage Global Scripts | ✓ | |
| Manage Application Links | ✓ | |
| Manage Global Selection Pages | ✓ | |
| Manage License Information | ✓ | |
| Manage Dictionary | ✓ | |
| Languages | ✓ | |
| Manage Excel Publish | ✓ | |
| OLAP Manager | ✓ | |
| Create Installation Template | ✓ | |
| Manage Installation Template | ✓ | |
| Import Template | ✓ | |
| Manage Data Warehouse | ✓ | |
| Manage Reporting Trees | ✓ |
Navigation Panel
| Permission | Basic | Security |
|---|---|---|
| Organize Navigation Panel Data Models | ✓ | |
| Organize Navigation Panel Views | ✓ | ✓ |
| Create Data Model | ✓ |
Folder
| Permission | Basic | Security |
|---|---|---|
| Create | ✓ | ✓ |
| Rename | ✓ | ✓ |
| Delete | ✓ | ✓ |
Dashboard
| Permission | Basic | Security |
|---|---|---|
| Rename | ✓ | ✓ |
| Change Publish for | ✓ | ✓ |
| Change Owner | ✓ | ✓ |
| Lock or Unlock | ✓ | ✓ |
| Open | ✓ | ✓ |
| Create | ✓ | ✓ |
| Design | ✓ | ✓ |
| Save As | ✓ | ✓ |
| Delete | ✓ | ✓ |
| Subscribe to Distribution | ✓ | ✓ |
| Add other emails in To, CC and Bcc | ✓ | |
| Send Comment | ✓ | ✓ |
| Export | ✓ | ✓ |
| ✓ | ✓ | |
| Use Filtering Function | ✓ | |
| Remove Filters | ✓ | ✓ |
Reports
| Permission | Basic | Security |
|---|---|---|
| Rename | ✓ | ✓ |
| Change Publish for | ✓ | ✓ |
| Change Owner | ✓ | ✓ |
| Lock or Unlock | ✓ | ✓ |
| Open | ✓ | ✓ |
| Create | ✓ | ✓ |
| Design | ✓ | ✓ |
| Save As | ✓ | ✓ |
| Delete | ✓ | ✓ |
| Subscribe to Distribution | ✓ | ✓ |
| Add other emails in To, CC and Bcc | ✓ | |
| Send Comment | ✓ | ✓ |
| Export | ✓ | ✓ |
| ✓ | ✓ | |
| Use Filtering Function | ✓ |
Excel Add-in
| Permission | Basic | Security |
|---|---|---|
| Formula wizard | ✓ | ✓ |
| Formula drill-down | ✓ | ✓ |
| Data Entry | ✓ | ✓ |
| Link to formula | ✓ | ✓ |
| Pivot Table | ✓ | ✓ |
| Pivot Table Refresh | ✓ | ✓ |
| Duplicator | ✓ | ✓ |
| Data Extraction | ✓ | ✓ |
| Data Extraction Refresh | ✓ | ✓ |
| Prompt | ✓ | ✓ |
| Quick Prompt | ✓ | ✓ |
| Create Static Copy | ✓ | ✓ |
| References Configuration | ✓ | ✓ |
| Change Password | ✓ | ✓ |
| Open View | ✓ | ✓ |
| Refresh Formulas | ✓ | ✓ |
| Data Model Configurations | ✓ | ✓ |
| Environment Configurations | ✓ | ✓ |
| Reporting Tree Selector | ✓ | ✓ |
| Reporting Tree Node Selector | ✓ | ✓ |
| Reporting Tree Duplicator | ✓ | ✓ |
Workbook
| Permission | Basic | Security |
|---|---|---|
| Copy Folder | ✓ | ✓ |
| Rename | ✓ | ✓ |
| Create | ✓ | ✓ |
| Save As | ✓ | ✓ |
| Delete | ✓ | ✓ |
| Ribbon | ✓ | ✓ |
OLAP Manager
| Permission | Basic | Security |
|---|---|---|
| Add and Save Cube | ✓ | |
| Copy and Delete Cube | ✓ | |
| Navigation | ✓ | |
| Build | ✓ | |
| Load All | ✓ | |
| Refresh | ✓ |
Data model roles recommended permissions
Data Model
| Permission | Basic | Security |
|---|---|---|
| Design | ✓ | |
| Copy Data Model | ✓ | |
| Overwrite Data Model | ✓ | |
| Manage Selection Page | ✓ | |
| Manage Data Model Parameters | ✓ | |
| Manage Stored Procedures | ✓ | |
| Translate Data Model | ✓ | |
| Manage Info Pages | ✓ | |
| Execute Info Pages | ✓ | ✓ |
| Create Documentation | ✓ | |
| View Documentation | ✓ | ✓ |
| Rename | ✓ | |
| Delete | ✓ |
View
| Permission | Basic | Security |
|---|---|---|
| Rename | ✓ | ✓ |
| Change Publish for | ✓ | ✓ |
| Change Owner | ✓ | ✓ |
| Lock or Unlock | ✓ | ✓ |
| Edit Prompt Selection on Open | ✓ | ✓ |
| Open | ✓ | ✓ |
| Save | ✓ | ✓ |
| Create | ✓ | ✓ |
| Save As | ✓ | ✓ |
| Delete | ✓ | ✓ |
| Subscribe to Distribution | ✓ | ✓ |
| Add other emails in To, CC and Bcc | ✓ | |
| Send Comment | ✓ | ✓ |
| Export | ✓ | ✓ |
| ✓ | ✓ | |
| Use Data Entry | ✓ | ✓ |
Calculated Column
| Permission | Basic | Security |
|---|---|---|
| Create | ✓ | ✓ |
| Edit | ✓ | ✓ |
| Delete | ✓ | ✓ |
Filter
| Permission | Basic | Security |
|---|---|---|
| Create | ✓ | ✓ |
| Save | ✓ | ✓ |
| Rename | ✓ | ✓ |
| Change Publish for | ✓ | ✓ |
| Change Owner | ✓ | ✓ |
| Lock or Unlock View | ✓ | ✓ |
| Apply Predefined Filters | ✓ | ✓ |
| Delete Predefined Filters | ✓ | ✓ |
| Use Filtering Function | ✓ | ✓ |
| Edit Advanced Filter | ✓ | |
| Remove Filters | ✓ |