Available User Roles
| Role | Description |
|---|---|
| Admin | Unrestricted access to all areas of the application, including system configuration, user management, and licensing. |
| Power User | Elevated privileges to process files, manage their own jobs, upload files, and view execution logs — but cannot alter application configuration or manage users. |
| Read-Only User | Can access and view insights, lineage, and download files — without the ability to process files or modify system behaviour. |
Feature Access Matrix
| Page / Functionality | Admin | Power User | Read-Only User |
|---|---|---|---|
| Metadata Insights | ✅ | ✅ | ✅ |
| Lineage & Impact Analysis | ✅ | ✅ | ✅ |
| Download generated output | ✅ | ✅ | ✅ |
| Process files (local & BI Server, incl. browsing Tableau and Power BI) | ✅ | ✅ | — |
| Upload files | ✅ | ✅ | — |
| Scheduled jobs | ✅ All users' jobs (reassign & delete) | ✅ Their own jobs | — |
| Notifications | ✅ | ✅ | — |
| Execution logs (view & download) | ✅ | ✅ | — |
| Clear execution logs | ✅ | — | — |
| Troubleshooting & audit logs (download) | ✅ | — | — |
| Configuration (BI Server, Database, SSO, MFA, Settings) | ✅ | — | — |
| User Management | ✅ | — | — |
| License Management | ✅ | — | — |
Roles vs. Licence
Roles control what a user is allowed to do; your plan controls which features exist to begin with. A user may have the right role but still not see a feature if their plan does not include it. See License Management for your plan's entitlements.
The two BI platforms are entitled separately. The Power BI licence gates all Power BI: without it, Power BI is hidden everywhere — the source tab, the lineage source type, the Metadata Insights cards and the users table column. The Tableau connector licence gates Tableau Server and Tableau Cloud connectivity only; a customer without it can still process Tableau workbook files uploaded from disk, and their Tableau content still appears throughout the product.
Power BI access is also gated per user
Beyond role and licence, a Power BI workspace is only available to users whose email is among its discovered members — including Admins, who get no bypass. See Power BI Service.
Next Steps
- Create and manage users: User Management
- Configure SSO with role mapping: SSO Configuration
- Session & password policies: Security & Sessions