Create a Permission

Create permissions to give users access to data, capabilities, and content in the solution.

Note: If the More Security Around Data Access Management feature is enabled, you will need the Super Admin permission to perform this task. Not sure if you have this feature? Reach out to your administrator. For more information, see More security around data access management.

You can create a new permission or duplicate an existing permission and use it as a starting point.

Create a new permission

Note: This feature is also available through Visier's public APIs. For more information, see Permissions API.

  1. In a project, on the navigation bar, click Security > Permissions.

  2. In the Permissions room, click Add Permission.
  3. In the New Permission dialog, add a display name and description for the permission and then click Create.

    Tip: The description should include information about the purpose of the permission and the level of data access a user will have.

  4. Select the items you want to grant access to:
    1. In the Data security tab, click Add access.
    2. In the Select the data dialog, select the items and then click Finish. For more information, see Add Access to Items.
  5. Configure the population access for each item:
    1. Click in the Population Access column.

    2. In the Refine population access dialog, select one of the following:
      • No access: Block users with this permission from accessing the entire population.
      • Access to all: Give users with this permission access to the entire population.
      • Custom: Give users with this permission access to a specific population through member filters or dynamic filters. For more information, see Security Filters and Create a Security Filter. Custom population access is not available for sources.

        Tip:  

        • When you add access to analytic objects that are strongly related to each other, you have the option of linking the population settings. For example, if you add access to the Applicant and Requisition subjects, you can set the population access for Applicant to inherit the population access that you defined for Requisition.
        • You will be provided with an estimate of the population based on your setting and the custom security filters applied.

        • If you have a prebuilt security filter for the analytic object, you'll find it in the Filter dialog, in the Security Filters category.
        • Set the population access for multiple subjects and overlays by clicking the Bulk Action button in the Population Access header.
    3. When finished, click Apply.
  6. Configure the data access for each item. Data access is not applicable to sources.
    1. Click in the Data access column.

    2. In the Configure data access for room set the level of data access for each property, reference, and event of the item. For more information, see Data Access Sets.

      Tip:  

      • If you have a prebuilt data access set for the analytic object, link to it by hovering over the Data access column and click the Link shareable access set button . After a data access set has been linked, the Link shareable access set button will turn blue.
      • Set the data access level for multiple subjects and overlays by clicking the Bulk Action button in the Data Access header.
    3. When finished, click Apply.
  7. In the Capabilities tab, select the capabilities for the permission. Capabilities determine the actions users with this permission can perform in the solution. For more information, see Capabilities List.
  8. In the Content packages tab, select the content packages for the permission. Content packages control what analyses, metrics, dimensions, and key groups users with this permission can see in the solution. For more information, see Content Packages.

Create a permission from an existing permission

  1. In a project, on the navigation bar, click Security > Permissions.

  2. In the Permissions list, select the permission you want to use as a template.
  3. In the upper-right corner of the room, click Duplicate.
  4. In the new permission, edit the metadata, data security, and capabilities.