User Roles
For security and usability, each feature of the GoodData Portal is designed to be available to users based on the workspace role assigned to the individual user. Each user invited to a workspace is assigned a role within the workspace. Roles determine the features available to a workspace’s users, including the pages, tools, and workspace data.
A user’s role can vary between workspaces. Some areas of the Portal may not be available depending on the user’s role. Roles must be assigned on a per-workspace basis.
Each role is defined by a set of permissions. For more information, see User Roles Permissions.
In GoodData, terms workspace and project denote the same entity. For example, project ID is exactly the same as workspace ID. See Find the Workspace ID.
What user roles are available
- Administrator can access and use all the features of the GoodData Portal, manage a workspace’s data and users in the workspace. This role is the most powerful one in the GoodData Portal. Role identifier: adminRole
- Editor can customize dashboards and reports, and review workspace data. However, editors do not have full access to manage workspace data (for example, editors can review defined workspace variables, but cannot create or modify them). Editors can view the other members in a workspace, but cannot invite new workspace members. Role identifier: editorRole
- Editor + Invitations has the privileges of the Editor user role with the additional permission to invite users to the workspace. Role identifier: editorInviteRole
- Editor + User Admin has the privileges of the Editor + Invitations user role with additional permissions to manage relations between data permissions and users and to create and manage user and workspace variables. Role identifier: editorUserAdminRole
- Explorer can access dashboards in a workspace on a view-only basis. The Explorer users can access Analytical Designer*, and create and edit insights. They can also access, create, and edit KPI Dashboards*, and share KPI Dashboards they created. The navigation bar is visible, but the Reports and Manage pages are not available. Role identifier: explorerRole
- Viewer can access dashboards and KPI Dashboards* in a workspace on a view-only basis. The Viewer users cannot access Analytical Designer. The navigation bar is visible, but the Reports, Analyze, Load, and Manage pages are not available. Role identifier: readOnlyUserRole
- Viewer (disabled exports) has the privileges of the Viewer user role except for the permission to export and print reports or dashboards (but is still allowed to schedule automatic emailing of dashboards as PDF). Role identifier: readOnlyNoExportRole
- (In embedded mode only) Explorer (embedded only) can access dashboards in a workspace on a view-only basis. These users can access Analytical Designer*, and create and edit insights. They can also access, create, and edit KPI Dashboards*, and share KPI Dashboards they created. These users cannot access GoodData Portal through direct login or through an organization’s custom portal. The navigation bar is not visible. Role identifier: explorerOnlyRole
- (In embedded mode only) Viewer (embedded only) users can access only dashboards and only on a view-only basis. These users cannot access GoodData Portal through direct login or through an organization’s custom portal. The navigation bar is not visible. This role is the most restricted one in the GoodData Portal. Role identifier: dashboardOnlyRole
* If enabled in the workspace
We recommend that you read the following articles to get acquainted with accessing Analytical Designer and KPI Dashboards:
What tasks each role can and cannot perform
The following table lets you compare the scope of tasks that each user role can or cannot perform.
Tasks | Administrator | Editor | Editor + Invitations | Editor + User Admin | Explorer | Viewer | Viewer (disabled exports) | Explorer (embedded only)** | Viewer (embedded only)** |
---|---|---|---|---|---|---|---|---|---|
Access the GoodData Portal directly (log in) | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Submit support tickets to GoodData Support from the GoodData Portal | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Access and modify account information and regional number formatting preferences | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Delete their own account | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Select workspaces, dashboards, tabs | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Export and print dashboards and reports | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ |
View dashboards and all of their contents (reports, widgets, and embedded web content) through an external application | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Hover over dashboard reports for additional information | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Use predefined dashboard filters | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Use predefined drill paths in dashboard reports | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Create saved views | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |
Share existing dashboards | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Edit existing dashboards, and create new dashboards | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Edit existing reports, and create new reports | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Access KPI dashboards*, and add alerts to KPIs | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Edit existing KPI dashboards*, and create new KPI dashboards | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Access Analytical Designer* | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Edit existing insights, and create new insights in Analytical Designer* | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
View data model, data sets, and workspace elements (facts, attributes, metrics, variables) | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Create and manage variables | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Create and modify data permissions | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Manage relations between data permissions and users | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Edit workspace attributes (for example, add drill paths), edit workspace metrics, and create new metrics by aggregating workspace facts | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Upload CSV files via CSV Uploader* | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
Upload CSV files using the LDM Modeler | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Create data load processes for a workspace | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Modify and delete data load processes for a workspace | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Modify a workspace's underlying data model | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Delete a workspace | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
View the other members in a workspace | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Invite new users to a workspace | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Assign and modify user roles | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Disable users | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Email messages to other workspace users from within a workspace (see Managing Users in Workspaces) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
* If enabled in the workspace
** Only in embedded mode
How you decide what role to assign to a user
The following table lets you decide what role is most suitable for a user depending on what tasks you want this user to be able to perform and what feature of the GoodData Portal you want them to be able to access.
A user can: | A user cannot: | User role (non-embedded mode) | User role (embedded mode) |
---|---|---|---|
| n/a | Administrator | Administrator |
|
| Editor | Editor |
|
| Editor + Invitations | Editor + Invitations |
|
| Editor + User Admin | Editor + User Admin |
|
| Explorer | Explorer |
|
| Viewer | Viewer |
|
| Viewer (disabled exports) | Viewer (disabled exports) |
|
| n/a | Explorer (embedded only) |
|
| n/a | Viewer (embedded only) |
* If enabled in the workspace
Custom user roles
If none of the existing user roles does not meet your business requirements, you can request a custom user role. For more information, see Create a Custom User Role.