Managed space permissions for users with Professional or Full User entitlement

This help topic contains tables outlining what members with Professional or Full User entitlement can do in a managed space.

Space actions

You need the Managed Space Creator user role in the tenant to create new managed spaces.

Space actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
See the space exists	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Delete the space	Yes	Yes	No	No	No	No	No	No
Add members to the space	Yes	Yes	No	No	No	No	No	No
Change member permissions for the space Space owners can be changed by tenant and analytics administrators in the Management Console.	Yes	Yes	No	No	No	No	No	No
Remove members from the space	Yes	Yes	No	No	No	No	No	No

App actions

App actions – General

General app actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Open an app	Yes	Yes	No	Yes	Yes	Yes	No	Yes
Publish or republish apps to this space If the app being published is in a shared space, you also need the Can edit space role or higher in that shared space in order to publish the app.	Yes	No	Yes	No	No	No	No	No
See apps they published to this space	Yes	Yes	No	Yes	Yes	Yes	No	Yes
See all apps in the space	Yes	Yes	No	Yes	Yes	Yes	No	Yes
Export apps in the space (Export without data option only)	Yes	Yes	No	No	No	No	No	No
Share apps in the space with non-space members	Yes	Yes	No	No	No	No	No	No
Remove app-only access to apps from non-space members	Yes	Yes	No	No	No	No	No	No
Delete an app	Yes	Yes	No	No	No	No	No	No
Edit app attributes (change name, description, and tags)	Yes	Yes	No	No	No	No	No	Yes
Edit app properties (select theme, enable right-to-left reading order, set a bookmark as app default, and sheet title styling)	Yes	Yes	No	No	No	No	No	No

App actions – Data modeling and reload

Data management actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Open Data model viewer	Yes	Yes	No	No	No	No	No	No
Reload the app and create scheduled reloads	Yes	Yes	No	No	No	No	No	Yes

App actions – Sheets, storytelling, and visualizations

Sheets, storytelling, and visualizations actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
View master items	Yes	Yes	No	Yes	Yes	Yes	No	No
View variables	Yes	Yes	No	No	No	No	No	No
View media library content	Yes	Yes	No	Yes	No	No	No	Yes
Add private sheets to the app	Yes	Yes	No	Yes	No	No	No	No
Add private bookmarks to the app	Yes	Yes	No	Yes	Yes	Yes	No	No
Add private stories to the app	Yes	Yes	No	Yes	Yes	No	No	No
Publish and unpublish your own private sheets, bookmarks, and stories to and from Community	Yes	Yes	No	Yes	No	No	No	No
Make all Community sheets, bookmarks, and stories private in the app (unpublish them)	Yes	Yes	No	No	No	No	No	No
Copy a link to a Public or Community bookmark	Yes	Yes	No	Yes	No	No	No	No
Take snapshots in the app	Yes	Yes	No	Yes	Yes	No	No	No
Monitor a visualization in the Qlik Cloud Analytics hub	Yes	Yes	No	Yes	Yes	No	No	No

App actions – Augmented analytics

Augmented analytics actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Search for app fields in Insight Advisor Chat	Yes	Yes	No	No	No	No	No	No
Search for app master items in Insight Advisor Chat	Yes	Yes	No	Yes	Yes	Yes	No	Yes
Toggle Insight Advisor Chat and key driver analysis on and off	Yes	Yes	No	No	No	No	No	Yes
Create, edit, rerun, view, and delete key driver analyses	Yes	Yes	No	Yes	Yes	No	No	No

App actions – Notes

You can add notes to the space when you are viewing an app.

App notes actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Add notes	Yes	Yes	No	Yes	Yes	Yes	No	Yes
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them individually.	Yes	Yes	No	No	No	No	No	No
Delete notes in the space The note owner can also delete the note.	Yes	Yes	No	No	No	No	No	No

App actions – Reporting

Reporting actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Connect to the app in the Qlik add-in for Microsoft Excel	Yes	Yes	No	Yes	Yes	Yes	No	Yes
View and use the Reporting section in the app	Yes	Yes	No	No	No	No	No	Yes

Script actions

Script actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Publish or republish scripts to this space If the script being published is in a shared space, you also need the Can edit space role or higher in that shared space in order to publish the script.	Yes	No	Yes	No	No	No	No	No
See scripts they published to this space	Yes	Yes	No	Yes	Yes	Yes	No	Yes
See all scripts in the space	Yes	Yes	No	Yes	Yes	Yes	No	Yes
Open a script	Yes	Yes	No	Yes	Yes	Yes	No	Yes
Delete a script	Yes	Yes	No	No	No	No	No	No
View load script in Editor	Yes	Yes	No	No	No	No	No	Yes
View script history in Editor	Yes	Yes	No	No	No	No	No	Yes
Preview and download earlier versions in History	Yes	Yes	No	No	No	No	No	Yes
Edit script attributes (change name, description, and tags)	Yes	Yes	No	No	No	No	No	Yes
Reload the app and create scheduled reloads	Yes	Yes	No	No	No	No	No	Yes

Data sources actions

Data sources actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
List and use data source in the space	Yes	Yes	No	No	No	No	Yes	Yes
Create data sources in the space	Yes	Yes	No	No	No	No	No	Yes
Edit data connections in the space To edit a data connection, the user must be the connection owner. User credentials are cleared each time a connection is edited.	Yes	Yes	No	No	No	No	No	Yes
Duplicate data files in the space	Yes	Yes	No	No	No	No	No	Yes
Move data files between spaces	Yes	Yes	No	No	No	No	No	Yes
Delete data source from the space	Yes	Yes	No	No	No	No	No	Yes
Profile data source	Yes	Yes	No	No	No	No	No	Yes
Edit and apply properties to data source in the space	Yes	Yes	No	No	No	No	No	Yes
Create app from data source	No	No	No	No	No	No	No	No
Open data connection or file for app reload	Yes	Yes	No	No	No	No	Yes	Yes
Binary load from apps inside space	Yes	No	No	No	No	No	Yes	Yes

AutoML actions

Security roles are used to control which users in the Qlik Cloud tenant can work with AutoML. Each role grants a different set of permissions on AutoML resources. The roles are assigned by an administrator. The roles are:

Automl Experiment Contributor
Automl Deployment Contributor

In addition to security roles, space roles further define the user's ability to perform actions in collaborative spaces. See the tables below for the security and space roles required for each AutoML action.

ML experiments cannot be created in a managed space.

Permissions related to using prediction data (for example, opening or profiling the dataset, or using it in an app) are generally the same as data sources actions.

For more information, see Who can work with Qlik AutoML.

AutoML deployment and prediction actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
List ML deployments in the space You also need one of the following roles: Automl Experiment Contributor Automl Deployment Contributor	Yes	Yes	No	Yes	Yes	No	No	Yes
Open ML deployment You also need one of the following roles: Automl Experiment Contributor Automl Deployment Contributor	Yes	Yes	No	Yes	Yes	No	No	Yes
Create ML deployment You also need one of the following roles: Automl Experiment Contributor Automl Deployment Contributor	Yes	No	Yes	No	No	No	No	No
Duplicate ML deployment You cannot duplicate an ML deployment in a managed space.	No	No	No	No	No	No	No	No
Delete ML deployment You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No
Edit ML deployment You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No
Create, edit, and delete prediction configurations You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No
Create, edit, and delete prediction schedules You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No
Change the owner of a prediction configuration You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No
Run prediction (from configuration, real-time API, or Qlik AutoML connector) You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	Yes	No
Move ML deployment to the space You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No
Move ML deployment to another space You also need the Automl Deployment Contributor role.	Yes	Yes	No	No	No	No	No	No

Business glossary actions for all user entitlements

The Steward user role is assigned to users by an administrator. This security role is used to control user access to business glossary features. Some business glossary actions do not require the Steward role.

Users who have the Can view role in a space or have the glossary shared with them can view terms in the glossary. Users who have the Can contribute or Can manage permissions in the space can edit unverified terms.

Users with Professional or Full User entitlement, as well as users with Analyzer entitlement, can work with business glossaries.

Business glossary actions by space role and user role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
List glossaries in the space	Yes	Yes	No	Yes	Yes	Yes	No	No
Open a glossary (details page only)	Yes	Yes	No	Yes	Yes	Yes	No	No
View glossary and terms	Yes	Yes	No	Yes	No	Yes	No	No
Move glossary from this space You also need the Steward role.	Yes	Yes	No	Yes	No	No	No	No
Move glossary to this space You also need the Steward role.	Yes	Yes	No	Yes	No	No	No	No
Create a glossary You also need the Steward role.	Yes	Yes	Yes	No	No	No	No	No
Edit glossary settings and page You also need the Steward role.	Yes	Yes	Yes	No	No	No	No	No
Delete a glossary You also need the Steward role.	Yes	Yes	Yes	No	No	No	No	No
Add a term in glossary	Yes	Yes	Yes	No	No	No	No	No
Edit term not in Verified state	Yes	Yes	Yes	No	No	No	No	No
Edit term in Verified state You also need the Steward role.	Yes	Yes	Yes	No	No	No	No	No
Delete term not in Verified state	Yes	Yes	Yes	No	No	No	No	No
Delete term in Verified state You also need the Steward role.	Yes	Yes	Yes	No	No	No	No	No
Change state of a term to/from Verified You also need the Steward role.	Yes	Yes	Yes	No	No	No	No	No
Change state of a term between states other than Verified	Yes	Yes	Yes	No	No	No	No	No
Create, edit, delete categories	Yes	Yes	Yes	No	No	No	No	No

Notes actions

Notes actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Add notes	Yes	Yes	No	Yes	Yes	Yes	No	Yes
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them individually.	Yes	Yes	No	No	No	No	No	No
Delete notes in the space The note owner can also delete the note.	Yes	Yes	No	No	No	No	No	No

Other content actions by space role in a managed space – Professional or Full User entitlement
Action	Owner (Space)	Can manage	Can publish	Can contribute	Can view	Has restricted view	Can consume data	Can operate
Create, edit, and delete generic links	Yes	Yes	No	No	No	No	No	No

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!

Leave your feedback here

Managed space permissions for users with Professional or Full User entitlement

Space actions

App actions

App actions – General

App actions – Data modeling and reload

App actions – Sheets, storytelling, and visualizations

App actions – Augmented analytics

App actions – Notes

App actions – Reporting

Script actions

Data sources actions

AutoML actions

Business glossary actions for all user entitlements

Notes actions

Other content actions

Space, managed

Tenant

Sheet

Data model viewer

Variable

Snapshot

Visualization

Notes

Did this page help you?