User roles

Roles in Holistics

There are four user roles in Holistics:

• Admin: Has all privileges of other roles, plus the ability to manage users, data sources, billing,... and impersonate other users.
• Analyst: Can create & edit reports, dashboards, data models and datasets on the data sources shared with them. Analysts cannot manage users, or connect new data sources.
• Explorer: Can view and explore datasets & dashboards that are shared with them. Explorers can create and edit dashboard when granted appropriate permission or in personal workspace.
• Viewer (Business User): Can only view reports and dashboards that are shared with them.

For more information on the difference between these roles, see the role permissions matrix below.

Role permissions matrix

All permissions for each role are listed below to help you decide which role to assign. This matrix reflects Holistics 4.0.

How to read the matrix:

• ✅ means the role has the permission, ❌ means it does not.
• CRUD stands for create, read, update, and delete.
• Superscript markers (such as ¹) point to the conditions listed beneath each table.

Data sources

Permission	Viewer	Explorer	Analyst	Admin
CRUD and manage data sources (access, connection credentials, etc.)	❌	❌	❌	✅

SQL Editor

Permission	Viewer	Explorer	Analyst	Admin
Access SQL Editor and write adhoc queries	❌	❌	✅	✅
Execute adhoc queries in SQL Editor	❌	❌	✅ 1	✅

Conditions:

1. Only if the data source is shared with the user.

Data models

Permission	Viewer	Explorer	Analyst	Admin
Access Development workspace	❌	❌	✅	✅
CRUD data models	❌	❌	✅	✅
Preview or retrieve data from models, datasets, and reports in Modeling	❌	❌	✅ 1	✅
Integrate with Git (connect to or disconnect an external repository)	❌	❌	✅	✅
Restore to a previous version	❌	❌	✅	✅
Deploy to production	❌	❌	✅	✅

Conditions:

1. On shared data sources only.

Datasets

Permission	Viewer	Explorer	Analyst	Admin
View, explore, and build from a dataset: • View in team workspace • Explore the dataset and its widgets • Create widgets and filters • CRUD business calculations	❌	✅ 1	✅ 2	✅
CRUD and manage datasets (data models, relationships, user access, and row-level permission rules)	❌	❌	✅ 3	✅
View a custom field's definition and generated SQL	❌	❌	✅ 2	✅

Conditions:

1. If the dataset is shared with the user.
2. If the underlying data source is shared, or the dataset is shared.
3. If the underlying data source is shared.

Folders

Permission	Viewer	Explorer	Analyst	Admin
View any folder and its child resources (folders, dashboards)	✅ 1	✅ 1	✅ 2	✅
Create, update, and delete a folder and its child folders, reports, and dashboards	❌	✅ 3	✅	✅

Conditions:

1. If the folder is shared with the user.
2. Widget data is hidden unless the underlying data source is shared with the user.
3. If the folder is shared with Edit permission.

Dashboards

Permission	Viewer	Explorer	Analyst	Admin
Create dashboard	❌	✅ 1	✅	✅
View and interact with a dashboard: • View in team workspace • Filter, cross-filter, and drill • Export	✅ 2	✅ 2	✅ 3	✅
Edit dashboard metadata (title, description)	❌	✅ 4	✅	✅
Lock dashboard	❌	❌	✅ 5	✅
CRUD filters	❌	✅ 4	✅ 6	✅
CRUD widgets	❌	✅ 4	✅ 6	✅
Copy and move dashboards or widgets	❌	✅ 7	✅ 8	✅ 8
Explore a widget	❌	✅ 9	✅ 6	✅
Share access with other users	❌	✅ 10	✅	✅
CRUD data schedules and shareable links	❌	❌	✅	✅
CRUD data alerts	❌	❌	✅	✅
CRUD embedded analytics	❌	❌	❌	✅
Edit cache settings	❌	✅ 4	✅	✅
Enable or disable drill-through and cross-filtering	❌	✅ 11	✅	✅

Conditions:

1. In personal workspace, or if the folder is shared with Edit permission.
2. If the dashboard is shared with the user.
3. Widget data is only visible if the underlying data source or dataset is shared with the user.
4. If the user owns the dashboard, or is granted Edit permission.
5. If the user owns the dashboard.
6. If the underlying data source or dataset is shared.
7. In personal workspace only, or with Edit permission on both the dashboard and the destination folder.
8. Between personal and team workspace.
9. If the dataset is shared.
10. In personal workspace only.
11. If the user owns the dashboard (3.0 dashboards only).

Admin management

Permission	Viewer	Explorer	Analyst	Admin
Workspace settings, billing, etc.	❌	❌	❌	✅
Invite and manage users and user attributes	❌	❌	❌	✅
Log in as another user (impersonation)	❌	❌	✅ 1	✅ 2

Conditions:

1. See when the impersonator is an analyst for details.
2. See when the impersonator is an admin for details.

Holistics as-code (4.0)

Permission	Viewer	Explorer	Analyst	Admin
Access the Data Modeling layer	❌	❌	✅	✅

Edit user role

To edit a user's role, from User Management Dashboard:

1. Click Edit.
2. Select the new role from the dropdown box.
3. Click Submit.