User Roles
For security and usability, each feature of the GoodData Portal is designed to be available to users based on the project role assigned to the individual user. Each user invited to a project is assigned a role within the project. Roles determine the features available to a project's users, including the pages, tools, and project data.
A user's role can vary between projects. Some areas of the Portal may not be available depending on the user's role. Roles must be assigned on a per-project basis.
Each role is defined by a set of permissions. For more information, see User Roles Permissions.
Contents:
What user roles are available
- Administrator can access and use all the features of the GoodData Portal, manage a project's data and users in the project.
This role is the most powerful one in the GoodData Portal.
Role identifier: adminRole
- Editor can customize dashboards and reports, and review project data. However, editors do not have full access to manage project data (for example, editors can review defined project variables, but cannot create or modify them). Editors can view the other members in a project, but cannot invite new project members.
Role identifier: editorRole
- Editor + Invitations has the privileges of the Editor user role with the additional permission to invite users to the project.
Role identifier: editorInviteRole
- Editor + User Admin has the privileges of the Editor + Invitations user role with additional permissions to manage relations between data permissions and users and to create and manage user and project variables.
Role identifier: editorUserAdminRole
- Explorer can access dashboards in a project on a view-only basis. The Explorer users can access Analytical Designer*, and create and edit insights. They can also access, create, and edit KPI Dashboards*.
The navigation bar is visible, but the Reports and Manage pages are not available.
Role identifier: explorerRole
- Viewer can access dashboards and KPI Dashboards* in a project on a view-only basis. The Viewer users cannot access Analytical Designer.
The navigation bar is visible, but the Reports, Analyze, Load, and Manage pages are not available.
Role identifier: readOnlyUserRole
- Viewer (disabled exports) has the privileges of the Viewer user role except for the permission to export and print reports or dashboards (but is still allowed to schedule automatic emailing of dashboards as PDF).
Role identifier: readOnlyNoExportRole
- (In embedded mode only) Explorer (embedded only) can access dashboards in a project on a view-only basis. These users can access Analytical Designer*, and create and edit insights. They can also access, create, and edit KPI Dashboards*.
These users cannot access GoodData Portal through direct login or through an organization's custom portal. The navigation bar is not visible.
Role identifier: explorerOnlyRole
- (In embedded mode only) Viewer (embedded only) users can access only dashboards and only on a view-only basis.
These users cannot access GoodData Portal through direct login or through an organization's custom portal. The navigation bar is not visible.
This role is the most restricted one in the GoodData Portal.
Role identifier: dashboardOnlyRole
* If enabled in the project
We recommend that you read the following articles to get acquainted with accessing Analytical Designer, KPI Dashboards, and CSV Uploader:
What tasks each role can and cannot perform
The following table lets you compare the scope of tasks that each user role can or cannot perform.
Tasks | Administrator | Editor | Editor + Invitations | Editor + User Admin | Explorer | Viewer | Viewer (disabled exports) | Explorer (embedded only)** | Viewer (embedded only)** |
---|---|---|---|---|---|---|---|---|---|
Access the GoodData Portal directly (log in) | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Submit support tickets to GoodData Support from the GoodData Portal | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Access and modify account information and regional number formatting preferences | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Delete their own account | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Select projects, dashboards, tabs | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
Export and print dashboards and reports | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ |
View dashboards and all of their contents (reports, widgets, and embedded web content) through an external application | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Hover over dashboard reports for additional information | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Use predefined dashboard filters | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Use predefined drill paths in dashboard reports | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Create saved views | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |
Edit existing dashboards, and create new dashboards | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Edit existing reports, and create new reports | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Access KPI dashboards*, and add alerts to KPIs | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Edit existing KPI dashboards*, and create new KPI dashboards | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Access Analytical Designer* | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Edit existing insights, and create new insights in Analytical Designer* | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
View data model, data sets, and project elements (facts, attributes, metrics, variables) | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Create and manage variables | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Create and modify data permissions | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Manage relations between data permissions and users | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Edit project attributes (for example, add drill paths), edit project metrics, and create new metrics by aggregating project facts | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Upload CSV files via CSV Uploader* x | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
Upload CSV files using the LDM Modeler | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Create data load processes for a project | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Modify and delete data load processes for a project | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Modify a project's underlying data model | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Delete a project | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
View the other members in a project | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
Invite new users to a project | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Assign and modify user roles | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Disable users | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Email messages to other project users from within a project (see Managing Users in Workspaces) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
* If enabled in the project
** Only in embedded mode
x CSV Uploader is available only for Growth and Enterprise plans.
How you decide what role to assign to a user
The following table lets you decide what role is most suitable for a user depending on what tasks you want this user to be able to perform and what feature of the GoodData Portal you want them to be able to access.
A user can: | A user cannot: | User role (non-embedded mode) | User role (embedded mode) |
---|---|---|---|
| n/a | Administrator | Administrator |
|
| Editor | Editor |
|
| Editor + Invitations | Editor + Invitations |
|
| Editor + User Admin | Editor + User Admin |
|
| Explorer | Explorer |
|
| Viewer | Viewer |
|
| Viewer (disabled exports) | Viewer (disabled exports) |
|
| n/a | Explorer (embedded only) |
|
| n/a | Viewer (embedded only) |
* If enabled in the project
Custom user roles
If none of the existing user roles does not meet your business requirements, you can request a custom user role. For more information, see Create a Custom User Role.
Thank you for your feedback!
Thank you for your feedback!
If you can't find what you need, don't hesitate to send us a comment.
Any questions?
Check out the GoodData community.