Basic and Security Roles Guideline
Use these guidelines to configure roles in a way that ensures appropriate access to features, protects sensitive data, and supports your organization’s governance model. This topic builds on the general role setup described in the Roles topic by offering best practices and examples for assigning permissions to the predefined Basic and Security roles.
Because role assignments and permissions contain sensitive information, only authorized personnel should view or modify these settings.
| Role | Description |
|---|---|
| Basic | Assign to users who access existing reports, dashboards, and views, and who may create their own versions. This role should not allow system-wide changes or administrative privileges. |
| Security | Assign to administrators or super-users who manage data models, OLAP cubes, governance rules, distribution jobs, and environment configurations. |
tip
Assign each role to a test account and verify that the permissions support only the expected tasks, without exposing unnecessary features.
Configure the basic and security roles
- From the navigation panel, click the gear icon. The Administration page opens.
- Select Security, then Roles.
- In the Manage dropdown, select whether general roles or data model roles.
- Select the Security or Basic role. A list of permissions appears below.
- Select the recommended permissions for general roles or data model roles.
General Roles recommended permissions
Administration
| Permission | Basic | Security |
|---|---|---|
| Manage Security | ✓ | |
| Manage Global Parameters | ✓ | |
| Manage Global Variables | ✓ | |
| Manage Distribution | ✓ | |
| Manage External Locations | ✓ | |
| Manage Global Scripts | ✓ | |
| Manage Application Links | ✓ | |
| Manage Global Selection Pages | ✓ | |
| Manage License Information | ✓ | |
| Manage Dictionnary | ✓ | |
| Languages | ✓ | |
| Manage Excel Publish | ✓ | |
| OLAP Manager | ✓ | |
| Create Installation Template | ✓ | |
| Manage Installation Template | ✓ | |
| Import Template | ✓ | |
| Manage Data Warehouse | ✓ | |
| Manage Reporting Trees | ✓ |
Navigation Panel
| Permission | Basic | Security |
|---|---|---|
| Organize Navigation Panel Data Models | ✓ | |
| Organize Navigation Panel Views | ✓ | ✓ |
| Create Data Model | ✓ |
Folder
| Permission | Basic | Security |
|---|---|---|
| Create | ✓ | ✓ |
| Rename | ✓ | ✓ |
| Delete | ✓ | ✓ |
Dashboard
| Permission | Basic | Security |
|---|---|---|
| Rename | ✓ | ✓ |
| Change Publish for | ✓ | ✓ |
| Change Owner | ✓ | ✓ |
| Lock or Unlock | ✓ | ✓ |
| Open | ✓ | ✓ |
| Create | ✓ |