Managed space permissions for users with Professional or Full User entitlement
This help topic contains tables outlining what members with Professional or Full User entitlement can do in a managed space.
Space actions
You need the Managed Space Creator user role in the tenant to create new managed spaces.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| See the space exists | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Delete the space | Yes | Yes | No | No | No | No | No | No |
| Add members to the space | Yes | Yes | No | No | No | No | No | No |
|
Change member permissions for the space Space owners can be changed by tenant and analytics administrators in the Administration activity center. |
Yes | Yes | No | No | No | No | No | No |
| Remove members from the space | Yes | Yes | No | No | No | No | No | No |
| Add, delete, rename, duplicate, and move folders in the space | Yes | Yes | No | No | No | No | No | Yes |
App actions
App actions – General
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Open an app | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
|
Publish or republish apps to this space
If the app being published is in a shared space, you also need the Can edit space role or higher in that shared space in order to publish the app. |
Yes | No | Yes | No | No | No | No | No |
| See apps they published to this space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| See all apps in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Export apps in the space (Export without data option only) | Yes | Yes | No | No | No | No | No | No |
| Share apps in the space with non-space members | Yes | Yes | No | No | No | No | No | No |
| Remove app-only access to apps from non-space members | Yes | Yes | No | No | No | No | No | No |
|
Delete an app |
Yes |
Yes |
No | No | No | No | No | No |
| Edit app attributes (change name, description, and tags) | Yes | Yes | No | No | No | No | No | Yes |
| Edit app properties (select theme, enable right-to-left reading order, set a bookmark as app default, and sheet title styling) | Yes | Yes | No | No | No | No | No | No |
| Approve app access requests | Yes | Yes | No | No | No | No | No | No |
App actions – Data modeling and reload
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Open Data model viewer |
Yes | Yes | No | No | No | No | No | No |
| Reload the app | Yes | Yes | No | No | No | No | No | Yes |
|
Create and manage tasks for scheduled reloads Managing these tasks includes the following actions:
|
Yes | Yes | No | No | No | No | No | Yes |
App actions – Sheets, storytelling, and visualizations
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
View master items |
Yes | Yes | No | Yes | No | No | No | No |
|
View variables |
Yes | Yes | No | No | No | No | No | No |
| View, create, edit, and delete media library content | Yes | Yes | No | No | No | No | No | No |
| Add private sheets to the app | Yes | Yes | No | Yes | No | No | No | No |
| Paste copied visualizations onto private sheets | Yes | Yes | No | Yes | No | No | No | No |
| Paste copied sheets in the app | Yes | Yes | No | Yes | No | No | No | No |
| Add private bookmarks to the app | Yes | Yes | No | Yes | Yes | Yes | No | No |
| Add private stories to the app | Yes | Yes | No | Yes | Yes | No | No | No |
|
Publish and unpublish your own private sheets, bookmarks, and stories to and from Community |
Yes | Yes | No | Yes | No | No | No | No |
|
Make all Community sheets, bookmarks, and stories private in the app (unpublish them) |
Yes | Yes | No | No | No | No | No | No |
| Copy a link to a Public or Community bookmark | Yes | Yes | No | Yes | No | No | No | No |
| Take snapshots in the app | Yes | Yes | No | Yes | Yes | No | No | No |
| Monitor a visualization in your personal space | Yes | Yes | No | Yes | Yes | No | No | No |
| Share a visualization to monitor in the managed space | Yes | Yes | No | No | No | No | No | No |
| Create links to sheets | Yes | Yes | No | No | No | No | No | No |
| Create, edit, and delete write table chart configurations | Yes | Yes | No | Yes | No | No | No | No |
| View write tables and make changes to their editable columns | Yes | Yes | No | Yes | Yes | No | No | No |
App actions – Augmented analytics
Prerequisites
In addition to required space roles, you may need to be assigned one or more permissions by a tenant administrator to perform Insight Advisor and Insight Advisor Chat actions. If you cannot perform these actions and you have the needed space roles, contact your administrator.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Search for app fields in Insight Advisor Chat | Yes | Yes | No | No | No | No | No | No |
| Search for app master items in Insight Advisor Chat | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Toggle Insight Advisor Chat and key driver analysis on and off | Yes | Yes | No | No | No | No | No | Yes |
|
Create, edit, rerun, view, and delete key driver analyses |
Yes | Yes | No | Yes | Yes | No | No | No |
App actions – Subscriptions and alerts
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Subscribe to a chart or sheet in the app | Yes | Yes | No | Yes | Yes | No | No | No |
| Create an alert for the app | Yes | Yes | No | Yes | Yes | No | No | No |
|
Manage a subscription or alert you have created Managing these items includes actions such as deleting, sending, evaluating, editing, disabling, and re-enabling. |
Yes | Yes | No | Yes | Yes | No | No | No |
| Unsubscribe from a subscription or alert for which you are a recipient | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
App actions – Notes
You can add notes to the space when you are viewing an app.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Add notes | Yes | Yes |
No |
Yes | Yes | Yes | No | Yes |
|
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them individually. |
Yes | Yes | No | No | No | No | No | No |
|
Delete notes in the space The note owner can also delete the note. |
Yes | Yes | No | No | No | No | No | No |
App actions – Reporting
For permissions related to Qlik Reporting Service automations, see Space permissions for reporting with Qlik Automate.
Prerequisites
In addition to required space roles, you may also need to be assigned or more permissions by a tenant administrator before being able to perform Qlik Reporting Service actions. In particular, you might need Generate all reports permissions.
If you cannot perform Qlik Reporting Service actions and you have the needed space roles, contact your administrator.
For a list of all permission requirements for the Qlik Reporting Service, administrators can refer to Administering reporting and subscriptions.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Connect to the app in the Qlik add-in for Microsoft Excel | Yes | Yes | No | Yes | No | No | No | Yes |
| View and use the Reporting section in the app | Yes | Yes | No | No | No | No | No | Yes |
|
Work with PixelPerfect and HTML report templates Working with these templates involves viewing, creating, editing, deleting, uploading, downloading, and configuring on-demand reporting for the templates. |
Yes | Yes | No | No | No | No | No | Yes |
| Generate an on-demand report from the app | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes |
Script actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Publish or republish scripts to this space
If the script being published is in a shared space, you also need the Can edit space role or higher in that shared space in order to publish the script. |
Yes | No | Yes | No | No | No | No | No |
| See scripts they published to this space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| See all scripts in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Open a script | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
|
Delete a script |
Yes |
Yes |
No | No | No | No | No | No |
| View load script in Editor | Yes | Yes | No | No | No | No | No | Yes |
| View script history in Editor | Yes | Yes | No | No | No | No | No | Yes |
| Preview and download earlier versions in History | Yes | Yes | No | No | No | No | No | Yes |
| Edit script attributes (change name, description, and tags) | Yes | Yes | No | No | No | No | No | Yes |
| Reload the script | Yes | Yes | No | No | No | No | No | Yes |
|
Create and manage tasks for scheduled reloads Managing reload tasks includes the following actions:
|
Yes | Yes | No | No | No | No | No | Yes |
Data flow actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Publish or republish a data flow to this space | Yes | No | Yes | No | No | No | No | No |
| See all data flows in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Open a data flow | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Delete a data flow | Yes | Yes | No | No | No | No | No | No |
| View | Yes | Yes | No | Yes | Yes | No | No | Yes |
| View run history | Yes | Yes | No | No | No | No | No | Yes |
|
View lineage and impact analysis You also need View lineage set to Allowed via User Default or custom security role |
Yes | Yes | Yes | Yes | No | No | No | Yes |
| Edit a data flow attributes | Yes | Yes | No | No | No | No | No | Yes |
| Reload a data flow and schedule reloads | Yes | Yes | No | No | No | No | No | Yes |
Table recipe actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Publish or republish a table recipe to this space | Yes | No | Yes | No | No | No | No | No |
| See all table recipes in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Open a table recipe | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Delete a table recipe | Yes | Yes | No | No | No | No | No | No |
| View run history | Yes | Yes | No | No | No | No | No | Yes |
|
View lineage and impact analysis You also need View lineage set to Allowed via User Default or custom security role |
Yes | Yes | No | Yes | No | No | No | Yes |
| Edit a table recipe attributes | Yes | Yes | No | No | No | No | No | Yes |
| Reload a table recipe and schedule reloads | Yes | Yes | No | No | No | No | No | Yes |
Data sources actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
List and use data connections in the space You also need a value of Allowed or Read for the Data connections permission. |
Yes | Yes | No | No | No | No | Yes | Yes |
| List and use data files in the space | Yes | Yes | No | No | No | No | Yes | Yes |
|
Create data connections in the space You also need a value of Allowed for the Data connections permission. |
Yes | Yes | No | No | No | No | No | Yes |
| Create data files in the space | Yes | Yes | No | No | No | No | No | Yes |
|
Edit data connections in the space To edit a data connection, the user must be the connection owner. User credentials are cleared each time a connection is edited. You also need a value of Allowed for the Data connections permission. |
Yes | Yes | No | No | No | No | No | Yes |
|
Edit your own credentials for connections with User defined credentials You also need a value of Read or Allowed for the Data connections permission. |
Yes | Yes | No | No | No | No | Yes | Yes |
| Duplicate data files in the space | Yes | Yes | No | No | No | No | No | Yes |
| Move data files | Yes | Yes | No | No | No | No | No | Yes |
|
Delete data connections from the space You also need a value of Allowed for the Data connections permission. |
Yes | Yes | No | No | No | No | No | Yes |
| Delete data files from the space | Yes | Yes | No | No | No | No | No | Yes |
| Profile data source | Yes | Yes | No | No | No | No | No | Yes |
| Edit and apply properties to data files in the space | Yes | Yes | No | No | No | No | No | Yes |
|
Edit and apply properties to data connections in the space You also need a value of Allowed for the Data connections permission. |
Yes | Yes | No | No | No | No | No | Yes |
| Create app from data source | No | No | No | No | No | No | No | No |
|
Open data connection for app reload You also need a value of Allowed or Read for the Data connections permission. |
Yes | Yes | No | No | No | No | Yes | Yes |
| Open data file for app reload | Yes | Yes | No | No | No | No | Yes | Yes |
| Binary load from apps inside space | Yes | No | No | No | No | No | Yes | No |
Qlik Predict — ML deployment actions
ML deployment actions – View access
Prerequisites
In addition to required space roles, you may need to be assigned one or more permissions by a tenant administrator before being able to perform these actions. These permissions are:
-
Automl Experiment Contributor built-in security role
-
Automl Deployment Contributor built-in security role
-
Manage ML experiments permission (user)
-
Manage ML deployments permission (user)
-
Manage ML experiments and deployments admin permission
If you cannot perform these actions and you have the needed space roles, contact your administrator.
For a list of all permission requirements for Qlik Predict, administrators can refer to Who can work with Qlik Predict.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
List ML deployments in the space |
Yes | Yes | No | Yes | Yes | No | No | Yes |
|
Open ML deployment |
Yes | Yes | No | Yes | Yes | No | No | Yes |
|
Download training reports for models in an ML deployment You also need view access for the experiment in which the model was trained. |
Yes | Yes | No | Yes | Yes | No | No | No |
|
Open Lineage directly from the deployment You also need View lineage set to Allowed via User Default or custom security role |
Yes | Yes | No | Yes | Yes | No | No | Yes |
|
Open and view the deployment in Impact analysis |
Yes | Yes | No | Yes | Yes | No | No | Yes |
ML deployment actions – Model deployment and approval
Prerequisites
In addition to required space roles, you may need to be assigned one or more permissions by a tenant administrator before being able to perform these actions. These permissions are:
-
Automl Deployment Contributor built-in security role
-
Manage ML deployments permission (user)
-
Manage ML experiments and deployments admin permission
-
Approve or reject your ML models permission (user)
-
Approve or reject ML models admin permission
If you cannot perform these actions and you have the needed space roles, contact your administrator.
For a list of all permission requirements for Qlik Predict, administrators can refer to Who can work with Qlik Predict.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Deploy model to an ML deployment (new or existing) If the source experiment is in shared space, you also need one of the following roles in its space:
|
Yes | No | Yes | No | No | No | No | No |
|
Remove a model from an ML deployment |
Yes | No | Yes | No | No | No | No | No |
|
Activate and deactivate a model in an ML deployment |
Yes | Yes | No | No | No | No | No | No |
ML deployment actions – Management
Prerequisites
In addition to required space roles, you may need to be assigned one or more permissions by a tenant administrator before being able to perform these actions. These permissions are:
-
Automl Deployment Contributor built-in security role
-
Manage ML deployments permission (user)
If you cannot perform these actions and you have the needed space roles, contact your administrator.
For a list of all permission requirements for Qlik Predict, administrators can refer to Who can work with Qlik Predict.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Delete ML deployment |
Yes | Yes | No | No | No | No | No | No |
|
Edit ML deployment |
Yes | Yes | No | No | No | No | No | No |
|
Create, rename, and delete model aliases in an ML deployment |
Yes | Yes | No | No | No | No | No | No |
|
Move ML deployment to the space |
Yes | Yes | No | No | No | No | No | No |
|
Move ML deployment to another space |
Yes | Yes | No | No | No | No | No | No |
ML deployment actions – Predictions
Prerequisites
In addition to required space roles, you may need to be assigned one or more permissions by a tenant administrator before being able to perform these actions. These permissions are:
-
Automl Deployment Contributor built-in security role
-
Manage ML deployments permission (user)
-
Run ML API and connector predictions permission (user)
If you cannot perform these actions and you have the needed space roles, contact your administrator.
For a list of all permission requirements for Qlik Predict, administrators can refer to Who can work with Qlik Predict.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Create, edit, and delete prediction configurations |
Yes | Yes | No | No | No | No | No | No |
|
Create, edit, and delete prediction schedules |
Yes | Yes | No | No | No | No | No | No |
|
Change the owner of a prediction configuration |
Yes | Yes | No | No | No | No | No | No |
|
Run batch prediction |
Yes | Yes | No | No | No | No | No | No |
|
Run prediction with real-time API endpoint |
Yes | Yes | No | No | No | No | Yes | No |
|
Run prediction with Qlik Predict analytics connector You also need sufficient access to the space of the data connection:
|
Yes | Yes | No | No | No | No | Yes | No |
Business glossary actions for all user entitlements
Users with Professional or Full User entitlement, as well as users with Analyzer entitlement, can work with business glossaries.
Access to business glossaries are controlled by your user role's permissions. In addition to your space permissions, you need to be assigned one of the following permissions to your user role by an administrator to use business glossaries:
-
Manage glossaries and approve terms:
-
Allowed
-
Read and collaborate on terms only
-
Manage only
-
For a list of what actions each permission supports, see Glossary actions by user role permission.
The Allowed setting for Manage glossaries and approve terms is the equivalent of the Steward global role that previously was used to administer business glossaries. The Steward role is still supported, but will eventually be replaced by the user role permissions.
If you cannot perform these actions and you have the needed space roles, contact your administrator.
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| List glossaries in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Open a glossary (details page only) | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| View glossary and terms | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
|
Move glossary from this space |
Yes | Yes | No | Yes | No | No | No | No |
|
Move glossary to this space |
Yes | Yes | No | Yes | No | No | No | No |
|
Create a glossary |
Yes | Yes | No | Yes | No | No | No | No |
|
Edit glossary settings and page |
Yes | Yes | No | Yes | No | No | No | No |
|
Delete a glossary |
Yes | Yes | No | Yes | No | No | No | No |
| Add a term in glossary | Yes | Yes | No | Yes | No | No | No | No |
| Edit term not in Verified state | Yes | Yes | No | Yes | No | No | No | No |
|
Edit term in Verified state |
Yes | Yes | No | Yes | No | No | No | No |
| Delete term not in Verified state | Yes | Yes | No | Yes | No | No | No | No |
|
Delete term in Verified state |
Yes | Yes | No | Yes | No | No | No | No |
|
Change state of a term to/from Verified |
Yes | Yes | No | Yes | No | No | No | No |
| Change state of a term between states other than Verified | Yes | Yes | No | Yes | No | No | No | No |
| Create, edit, delete categories | Yes | Yes | No | Yes | No | No | No | No |
| Can export glossaries and terms | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Notes actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Add notes |
Yes | Yes |
No |
Yes | Yes | Yes | No | Yes |
|
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them individually. |
Yes | Yes | No | No | No | No | No | No |
|
Delete notes in the space The note owner can also delete the note. |
Yes | Yes | No | No | No | No | No | No |
Qlik Answers actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restrictive view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
|
Chat with an assistant Can contribute, Can view, and Has restrictive view also require Can consume data to chat with assistants. |
Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Create new assistants | Yes | Yes | No | Yes | No | No | No | No |
| Move assistants to the space | Yes | Yes | No | Yes | No | No | No | No |
| Move assistants to another space | Yes | Yes | No | Yes | No | No | No | No |
| Open an assistant | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
| Delete an assistant | Yes | Yes | No | Yes | No | No | No | No |
| Edit an assistant | Yes | Yes | No | Yes | No | No | No | No |
| View assistant knowledge bases | Yes | Yes | No | Yes | Yes | No | No | No |
| Add and remove knowledge bases | Yes | Yes | No | Yes | No | No | No | No |
|
Review answers and feedback Information noteThis also requires the Audit Admin user role.
|
Yes | Yes | No | Yes | Yes | No | No | No |
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restrictive view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Create knowledge bases | Yes | Yes | No | Yes | No | No | No | No |
| Move knowledge bases to the space | Yes | Yes | No | Yes | No | No | No | No |
| Move knowledge bases to another space | Yes | No | No | Yes | No | No | No | No |
| Open a knowledge base | Yes | Yes | No | Yes | Yes | No | No | No |
| Delete a knowledge base | Yes | Yes | No | Yes | No | No | No | No |
| Edit a knowledge base | Yes | Yes | No | Yes | No | No | No | No |
|
Index sources Can contribute requires Can consume data in the space with the data. |
Yes | Yes | No | Yes | No | No | No | Yes |
| Set up an index schedule | Yes | Yes | No | Yes | No | No | No | Yes |
| Get answers from knowledge bases using an assistant | Yes | Yes | No | Yes | Yes | Yes | Yes | No |
| View sources from knowledge base | Yes | Yes | No | Yes | Yes | Yes | Yes | No |
Other content actions
| Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
|---|---|---|---|---|---|---|---|---|
| Create, edit, and delete generic links | Yes | Yes | No | No | No | No | No | No |