Setting Role Privileges

Role privileges are separate components of the RBAC system. They define the level of dataset access that this role is allowed to grant to the roles on the privilege row.

Follow these steps to add role privileges to the role Test Role 1:

  1. Add another privilege, by clicking the Add Privilege button.

    Adding Privileges Modal
  2. The Add Privilege modal window appears.

    Adding Privileges Modal
  3. Notice that the default privilege type is at the Connection level, but can be changed by selecting Role or Dataset from the list of Component Types.

    • In the Add Privilege modal window, under Component Type, select Role.
    • From Roles(s), select either Visual Consumer, a role we defined previously.

    • [Optional] Repeat the previous step to add more roles to this privilege. We are not doing this here.
    • [Optional] To remove a specific role, click the icon (x) next to the name of the role.
    Adding Privileges Modal
  4. After selecting the appropriate roles, click Create.

    Adding Privileges Modal
  5. The Role privilege for the Visual Consumer role appears on the list of privileges.

    By default, it contains all possible privileges for a role component:

    Note the following:

    1. The privilege type appears with the (roles) icon.
    2. The Grant view dashboards permission is mandatory if the other permissions exist, and cannot be removed.

      However, if you uncheck both Grant manage dashboards and Grant manage dataset, then the Grant view dashboards permission becomes mutable and can be unselected.

    3. The Grant manage dashboards permission is mandatory if Grant manage dataset permission is, and cannot be removed.

      If you uncheck Grant manage dataset, it becomes mutable and can be unselected.

    4. This privilege may be deleted by clicking the (trash/delete) icon.
    Adding Role Privileges Modal
    Role Privileges
  6. For the role permission on Visual Consumer, select only the Grant view dashboards permission.

    Adding Role Privileges for Visual Consumer
    Role Privileges
  7. Repeat the earlier steps twice more, creating the following privileges:

    Adding Role Privileges for Analyst and Data Admin
    Role Privileges
  8. Click Save at the top of the interface to save your progress.

Note the following:

Next, proceed to Setting Connection Privileges.