Roles and Permissions

Assigning Roles

Admins set the Role when inviting a member under Settings → Members, and can change it later from the Role column in the members list.

Role Summary

Roles build on each other: Analysts can do everything Guests can, Data Stewards everything Analysts can, and Admins everything Data Stewards can. Each row is something a member can do; a check means their role allows it.

Admin

Admins can do everything Data Stewards can do, plus invite and remove users, change roles, manage login connections, edit organization settings, and export the audit trail.

Data Steward

Data Stewards can read all organization data and create, edit, and delete imports, runs, process data, and Library items such as metrics, properties, and unit operation types. They can complete imports, create and edit formulas and parent metrics, use Assist, and view other members' Assist sessions in read-only mode. They can open, create, and edit any report; build chart analyses; use and edit skills and automations; and upload files. Data Stewards receive workspace notifications and report @mentions.

Analyst

Analysts can read all organization data, create and edit formulas and parent metrics, use Assist (including read-only access to other members' sessions), reports, chart analysis, skills, and automations, and upload files. They can stage imports for review but cannot complete them; someone with write access must complete the import. The import preview's Assigned to field can route it to an eligible colleague; see the Import guide. Analysts cannot edit runs, metrics, properties, or other organization data. They receive workspace notifications and report @mentions.

Guest

Guest users have read-only access only to reports that are explicitly shared with them. They cannot access the rest of the workspace and do not receive notifications. Reports can be shared with guests through the report's visibility and sharing controls; see the Reports guide.