Overview

Roles are bundles of permissions that are assigned to groups in order to access specific features and functionality in Platform. Groups can either have a single role or multiple roles assigned to them. Users gain access to a feature when they are a member of a Group which has the corresponding role.

Role permissions cascade. This means that, for example, a Standard User has all the privileges of a Report Viewer.

Here is a summary of Role abilities:

* In groups which they manage.

Report Viewer

The Report Viewer role is appropriate for users who need to view Reports in Platform, but will not be analyzing and managing data themselves.

Report viewers have access to:

• Projects and Reports

They do not have access to:

• Data Exploration & Management Tools 
• Query, Jobs, Workflows, Notebooks, Services, etc.
• Admin Center (Users & Groups)

Report viewers see a simplified nav bar:

Standard User

The Standard User role is appropriate for users who need to explore & manage data, automate workflows, and create reports.

Standard Users have access to: 

• Data Exploration & Management Tools 
  • Query, Jobs, Workflows, Notebooks, Services, etc.
• Admin Center
  • Ability to view Users & Groups within their Organization, or whom they are otherwise shared with.
  • Ability to Assume Role of Users in Groups which they manage.
    
    • Note: Group management permissions are granted via other groups. For example, User A can gain the ability to manage Group B by being a member of Group C, where Group C can manage Group B.
    • To view group permissions, navigate to the target Group's detail page, then click Related Groups.

Standard Users, Team Admins, and Org Admins will see this navigation bar:

Team Admin

The Team Admin role (formerly “Group Admin”) is appropriate for users who may need to explore & manage data, etc. and also manage a subset of user accounts. They administrate part of the organization.

Team Admins have access to: 

• Data Exploration & Management Tools 
  • Query, Jobs, Workflows, Notebooks, Services, etc.
• Admin Center
  • Ability to view Users & Groups within their Organization, or whom they are otherwise shared with.
  • Ability to Assume Role of Users in Groups which they manage.
  • Ability to manage User Accounts in Groups which they manage.

• • • Note: Group management permissions are granted via other groups. For example, User A can gain the ability to manage Group B by being a member of Group C, where Group C can manage Group B.
    • To view group permissions, navigate to the target group's detail page, then click Related Groups
  • Ability to create new Groups.
    • The Team Admin's Primary Group will automatically be assigned as a parent group with manager permissions for any new groups they create.

• • Ability to create new Users in Groups which they manage.

Team Admins should have the following roles assigned to them so that they can grant them to new/existing groups:

• Team Admin 
• Standard User
• Report Viewer

Organization Admin 

The Organization Admin (Org Admin) role is appropriate for users who need to administrate your entire Organization. Org Admins are able to manage all user accounts and most objects within the Organization.

Org Admins have access to: 

• Data Exploration & Management Tools 
• Query, Jobs, Workflows, Notebooks, Services, etc.
• Admin Center
• Ability to view Users & Groups within their Organization, or whom they are otherwise shared with.
• Ability to Assume Role of all Users in the Organization.
• Ability to manage all Users and Groups within the Organization.
• Ability to create new Users and Groups.
• Superadmin Mode
• Ability to temporarily gain manage permission on most Platform objects in the Organization, including Jobs, Projects, Reports, etc.

Organization Admins should have the following roles assigned to them so that they can grant them to new/existing groups:

• Organization Admin
• Team Admin 
• Standard User
• Report Viewer