Shared space permissions for users with Professional or Full User entitlement
This help topic contains tables outlining what members with Professional or Full User entitlement can do in a shared space.
For more information about managing permissions in shared spaces, including special considerations, see Managing permissions in shared spaces.
Space actions
You need the Shared Space Creator user role in the tenant to create new shared spaces.
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Rename the space | Yes | Yes | No | No | No | No |
Add members to the space | Yes | Yes | No | No | No | No |
Change member permissions for the space Space owners can be changed by tenant and analytics administrators in the Management Console. |
Yes | Yes | No | No | No | No |
Remove members from the space | Yes | Yes | No | No | No | No |
Delete the space | Yes | Yes | No | No | No | No |
App actions
App actions – General
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Create new apps in the space | Yes | Yes | Yes | Yes | No | No |
Move apps to the space | Yes | Yes | Yes | Yes | No | No |
Move apps to another space | Yes | Yes | Yes | Yes | No | No |
Duplicate apps in the space | Yes | Yes | Yes | Yes | No | No |
Export apps in the space | Yes | Yes | Yes | Yes | No | No |
Publish or republish apps from this space
When publishing or republishing an app to a managed space, you also need the Owner or Can publish space role in the managed space to which the app is being published. |
Yes | Yes | Yes | Yes | No | No |
Share apps in the space with non-space members | Yes | Yes | No | No | No | No |
Remove app-only access to apps from non-space members | Yes | Yes | No | No | No | No |
Open an app | Yes | Yes | Yes | Yes | Yes | No |
Delete an app | Yes | Yes | Yes | Yes | No | No |
Edit app attributes (change name, description, and tags) | Yes | Yes | Yes | Yes | No | No |
Edit app properties (select theme, enable right-to-left reading order, set a bookmark as app default, and sheet title styling) | Yes | Yes | Yes | Yes | No | No |
App actions – Data modeling and reload
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Open Data model viewer |
Yes | Yes | Yes | Yes | No | No |
Open and edit the data model in Data load editor or Data manager (in an app you own) | Yes | Yes | Yes |
Yes |
No | No |
Open and edit the data model in Data load editor or Data manager (in another user's app) | No | No | Yes | No | No | No |
Add data files to a space in Data load editor and Data manager (in an app you own) | Yes | No | Yes | No | No | No |
Add data files to a space in Data load editor and Data manager (in another user's app) | No | No | Yes | No | No | No |
Reload the app and create scheduled reloads |
Yes | Yes | Yes | Yes | No | No |
App actions – Sheets, storytelling, and visualizations
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Create, edit, and delete master items and variables |
Yes | Yes | Yes | Yes | No | No |
Create, edit, and delete media library content |
Yes | Yes | Yes | Yes | No | No |
Add private sheets to the app | Yes | Yes | Yes | Yes | No | No |
Add private bookmarks and stories to the app | Yes | Yes | Yes | Yes | Yes | No |
Make private sheets, bookmarks, and stories public in the app | Yes | Yes | Yes | Yes | No | No |
Make public sheets, bookmarks, and stories private in the app | Yes | Yes | Yes | Yes | No | No |
Take snapshots in the app | Yes | Yes | Yes | Yes | Yes | No |
Make snapshots public | Yes | Yes | Yes | Yes | No | No |
View on-demand app navigation links | Yes | Yes | Yes | Yes | Yes | No |
Create or update app navigation on-demand links | Yes | Yes | Yes | Yes | No | No |
Open on-demand selection apps | Yes | Yes | Yes | Yes | Yes | No |
Generate on-demand apps | Yes | Yes | Yes | Yes | Yes | No |
Create dynamic views | Yes | Yes | Yes | Yes | No | No |
Add dynamic charts to sheets | Yes | Yes | Yes | Yes | No | No |
Monitor a visualization in the cloud hub | Yes | Yes | Yes | Yes | Yes | No |
Create links to sheets | Yes | Yes | No | No | No | No |
App actions – Augmented analytics
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Customize your own app's business logic |
Yes | Yes | Yes | Yes | No | No |
Customize another user's app's business logic |
No | No | Yes | No | No | No |
Search for app fields in Insight Advisor Chat | Yes | Yes | No | Yes | No | No |
Search for app master items in Insight Advisor Chat | Yes | Yes | No | Yes | Yes | No |
Toggle Insight Advisor Chat and key driver analysis on and off | Yes | Yes | Yes | Yes | No | No |
Create, edit, rerun, view, and delete key driver analyses | Yes | Yes | Yes | Yes | Yes | No |
App actions – Notes
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Add notes | Yes | Yes | Yes | Yes | Yes | No |
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them. |
Yes | Yes | No | No | No | No |
Delete notes in the space The note owner can also delete the note. |
Yes | Yes | No | No | No | No |
App actions – Reporting
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Connect to the app in the Qlik add-in for Microsoft Excel | Yes | Yes | Yes | Yes | Yes | No |
View the Reporting section in the app | Yes | Yes | Yes | Yes | No | No |
View, create, edit, enable, disable, run, and delete report tasks | Yes | Yes | Yes | Yes | No | No |
View, create, edit, and delete report filters | Yes | Yes | Yes | Yes | No | No |
Create, upload, and delete report distribution lists in your own app |
Yes | Yes | Yes | Yes | No | No |
Create, upload, and delete report distribution lists in another user's app |
Yes | Yes | Yes | Yes | No | No |
View the recipients and groups from a report distribution list |
Yes | Yes | Yes | Yes | No | No |
View, upload, re-upload, download, and delete report templates | Yes | Yes | Yes | Yes | No | No |
Script actions
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Create a script | Yes | Yes | Yes | Yes | No | No |
Open a script | Yes | Yes | Yes | Yes | Yes | No |
Delete a script | Yes | Yes | Yes | Yes | No | No |
View the load script in Editor | Yes | Yes | Yes | Yes | No | No |
Edit the load script in Editor (in your own script) | Yes | No | Yes | No | No | No |
Edit the load script in Editor (in another user's script) | No | No | Yes | No | No | No |
View script history in Editor | Yes | Yes | Yes | Yes | No | No |
Preview and download earlier versions in History | Yes | Yes | Yes | Yes | No | No |
Restore earlier versions in History (in your own script) |
Yes | No | Yes | No | No | No |
Restore earlier versions in History (in another user's script) |
No | No | Yes | No | No | No |
Add data files to a space in Editor (in a script you own) | Yes | No | Yes | No | No | No |
Add data files to a space in Editor (in another user's script) | No | No | Yes | No | No | No |
Edit script attributes (change name, description, and tags) | Yes | Yes | Yes | Yes | No | No |
Reload the script and create scheduled reloads |
Yes | Yes | Yes | Yes | No | No |
Data sources actions
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
List and use data source in the space | Yes | Yes | Yes | Yes | No | Yes |
Create data sources in the space | Yes | Yes | Yes | Yes | No | No |
Edit data sources in the space To edit a data connection, the user must be the connection owner. User credentials are cleared each time a connection is edited. |
Yes | Yes | Yes | Yes | No | No |
Duplicate data files in the space | Yes | Yes | Yes | Yes | No | No |
Move data files between spaces | Yes | Yes | Yes | Yes | No | No |
Delete data source from the space | Yes | Yes | Yes | Yes | No | No |
Profile data source | Yes | Yes | Yes | Yes | No | No |
Edit and apply properties to data source in the space | Yes | Yes | Yes | Yes | No | No |
Create app from data source | Yes | Yes | Yes | Yes | No | No |
Open data connection or file for app reload | Yes | Yes | Yes | Yes | No | Yes |
Binary load from apps inside space | Yes | Yes | Yes | Yes | No | Yes |
Automation connections actions
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
List and use automation connections in the space | Yes | Yes | Yes | Yes | No | Yes |
Create automation connection in the space | Yes | Yes | No | Yes | No | No |
Delete automation connection from the space | Yes | Yes | Yes | Yes | No | No |
Edit automation connection in the space | Yes - If user owns the connection | Yes - If user owns the connection | No | Yes - If user owns the connection | No | No |
Create automation using automation connection | Yes | Yes | Yes | Yes | No | Yes |
AutoML actions
Security roles are used to control which users in the Qlik Cloud tenant can work with AutoML. Each role grants a different set of permissions on AutoML resources. The roles are assigned by an administrator. The roles are:
-
Automl Experiment Contributor
-
Automl Deployment Contributor
In addition to security roles, space roles further define the user's ability to perform actions in collaborative spaces. See the tables below for the security and space roles required for each AutoML action.
Permissions related to using prediction data (for example, opening or profiling the dataset, or using it in an app) are generally the same as data sources actions.
For more information, see Who can work with Qlik AutoML.
AutoML actions – Experiments
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
List ML experiments in the space You also need one of the following roles:
|
Yes | Yes | No | Yes | Yes | No |
Open ML experiment You also need one of the following roles:
|
Yes | Yes | No | Yes | Yes | No |
Create ML experiment You also need the Automl Experiment Contributor role. |
Yes | Yes | No | Yes | No | No |
Delete ML experiment You also need the Automl Experiment Contributor role. |
Yes | Yes | No | Yes | No | No |
Edit ML experiment You also need the Automl Experiment Contributor role. |
Yes | Yes | No | Yes | No | No |
Move ML experiment to the space You also need the Automl Experiment Contributor role. |
Yes | Yes | No | Yes | No | No |
Move ML experiment to another space You also need the Automl Experiment Contributor role. |
Yes | Yes | No | Yes | No | No |
AutoML actions – Deployments and predictions
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
List ML deployments in the space You also need one of the following roles:
|
Yes | Yes | No | Yes | Yes | No |
Open ML deployment You also need one of the following roles:
|
Yes | Yes | No | Yes | Yes | No |
Create ML deployment You also need one of the following roles:
|
Yes | Yes | No | Yes | No | No |
Duplicate ML deployment You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Delete ML deployment You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Edit ML deployment You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Create, edit, and delete prediction configurations You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Create, edit, and delete prediction schedules You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Change the owner of a prediction configuration You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Run prediction (from configuration, real-time API, or Qlik AutoML connector) You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | Yes |
Move ML deployment to the space You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Move ML deployment to another space You also need the Automl Deployment Contributor role. |
Yes | Yes | No | Yes | No | No |
Business glossary actions for all user entitlements
The Steward user role is assigned to users by an administrator. This security role is used to control user access to business glossary features. Some business glossary actions do not require the Steward role.
Users with Professional or Full User entitlement, as well as users with Analyzer entitlement, can work with business glossaries.
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
List glossaries in the space |
Yes | Yes | Yes | Yes | Yes | No |
Open a glossary (details page only) |
Yes | Yes | Yes | Yes | Yes | No |
View glossary and terms | Yes | Yes | Yes | Yes | Yes | No |
Move glossary from this space You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Move glossary to this space You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Create a glossary You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Edit glossary settings and page You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Delete a glossary You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Add a term in glossary | Yes | Yes | Yes | Yes | No | No |
Edit term not in Verified state | Yes | Yes | Yes | Yes | No | No |
Edit term in Verified state You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Delete term not in Verified state | Yes | Yes | Yes | Yes | No | No |
Delete term in Verified state You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Change state of a term to/from Verified You also need the Steward role. |
Yes | Yes | Yes | Yes | No | No |
Change state of a term between states other than Verified | Yes | Yes | Yes | Yes | No | No |
Create, edit, delete categories | Yes | Yes | Yes | Yes | No | No |
Link glossary terms to master items in apps | Yes | Yes | Yes | Yes | Yes | No |
Notes actions
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Add notes to the space | Yes | Yes | Yes | Yes | Yes | No |
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them. |
Yes | Yes | No | No | No | No |
Delete notes in the space The note owner can also delete the note. |
Yes | Yes | No | No | No | No |
Other content actions
Action | Owner (Space) | Can manage | Can edit data in apps | Can edit | Can view | Can consume data |
---|---|---|---|---|---|---|
Create, edit, and delete generic links | Yes | Yes | No | No | No | No |