Managed space permissions for users with Professional or Full User entitlement
This help topic contains tables outlining what members with Professional or Full User entitlement can do in a managed space.
Space actions
You need the Managed Space Creator user role in the tenant to create new managed spaces.
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
See the space exists | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Delete the space | Yes | Yes | No | No | No | No | No | No |
Add members to the space | Yes | Yes | No | No | No | No | No | No |
Change member permissions for the space Space owners can be changed by tenant and analytics administrators in the Administration activity center. |
Yes | Yes | No | No | No | No | No | No |
Remove members from the space | Yes | Yes | No | No | No | No | No | No |
Add, delete, rename, duplicate, and move folders in the space | Yes | Yes | No | No | No | No | No | Yes |
App actions
App actions – General
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Open an app | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Publish or republish apps to this space
If the app being published is in a shared space, you also need the Can edit space role or higher in that shared space in order to publish the app. |
Yes | No | Yes | No | No | No | No | No |
See apps they published to this space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
See all apps in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Export apps in the space (Export without data option only) | Yes | Yes | No | No | No | No | No | No |
Share apps in the space with non-space members | Yes | Yes | No | No | No | No | No | No |
Remove app-only access to apps from non-space members | Yes | Yes | No | No | No | No | No | No |
Delete an app |
Yes |
Yes |
No | No | No | No | No | No |
Edit app attributes (change name, description, and tags) | Yes | Yes | No | No | No | No | No | Yes |
Edit app properties (select theme, enable right-to-left reading order, set a bookmark as app default, and sheet title styling) | Yes | Yes | No | No | No | No | No | No |
App actions – Data modeling and reload
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Open Data model viewer |
Yes | Yes | No | No | No | No | No | No |
Reload the app and create scheduled reloads | Yes | Yes | No | No | No | No | No | Yes |
App actions – Sheets, storytelling, and visualizations
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
View master items |
Yes | Yes | No | Yes | No | No | No | No |
View variables |
Yes | Yes | No | No | No | No | No | No |
View, create, edit, and delete media library content | Yes | Yes | No | No | No | No | No | No |
Add private sheets to the app | Yes | Yes | No | Yes | No | No | No | No |
Paste copied visualizations onto private sheets | Yes | Yes | No | Yes | No | No | No | No |
Paste copied sheets in the app | Yes | Yes | No | Yes | No | No | No | No |
Add private bookmarks to the app | Yes | Yes | No | Yes | Yes | Yes | No | No |
Add private stories to the app | Yes | Yes | No | Yes | Yes | No | No | No |
Publish and unpublish your own private sheets, bookmarks, and stories to and from Community |
Yes | Yes | No | Yes | No | No | No | No |
Make all Community sheets, bookmarks, and stories private in the app (unpublish them) |
Yes | Yes | No | No | No | No | No | No |
Copy a link to a Public or Community bookmark | Yes | Yes | No | Yes | No | No | No | No |
Take snapshots in the app | Yes | Yes | No | Yes | Yes | No | No | No |
Monitor a visualization in your personal space | Yes | Yes | No | Yes | Yes | No | No | No |
Share a visualization to monitor in the managed space | Yes | Yes | No | No | No | No | No | No |
Create links to sheets | Yes | Yes | No | No | No | No | No | No |
App actions – Augmented analytics
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Search for app fields in Insight Advisor Chat | Yes | Yes | No | No | No | No | No | No |
Search for app master items in Insight Advisor Chat | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Toggle Insight Advisor Chat and key driver analysis on and off | Yes | Yes | No | No | No | No | No | Yes |
Create, edit, rerun, view, and delete key driver analyses |
Yes | Yes | No | Yes | Yes | No | No | No |
App actions – Subscriptions and alerts
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Subscribe to a chart or sheet in the app | Yes | Yes | No | Yes | Yes | No | No | No |
Create an alert for the app | Yes | Yes | No | Yes | Yes | No | No | No |
Manage a subscription or alert you have created Managing these items includes actions such as deleting, sending, evaluating, editing, disabling, and re-enabling. |
Yes | Yes | No | Yes | Yes | No | No | No |
Unsubscribe from a subscription or alert for which you are a recipient | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
App actions – Notes
You can add notes to the space when you are viewing an app.
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Add notes | Yes | Yes |
No |
Yes | Yes | Yes | No | Yes |
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them individually. |
Yes | Yes | No | No | No | No | No | No |
Delete notes in the space The note owner can also delete the note. |
Yes | Yes | No | No | No | No | No | No |
App actions – Reporting
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Connect to the app in the Qlik add-in for Microsoft Excel | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
View and use the Reporting section in the app |
Yes | Yes | No | No | No | No | No | Yes |
Work with PixelPerfect report templates Working with PixelPerfect report templates involves viewing, creating, editing, deleting, uploading, downloading, and configuring on-demand reporting for the templates. |
Yes | Yes | No | No | No | No | No | Yes |
Generate an on-demand report from the app | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes |
Script actions
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Publish or republish scripts to this space
If the script being published is in a shared space, you also need the Can edit space role or higher in that shared space in order to publish the script. |
Yes | No | Yes | No | No | No | No | No |
See scripts they published to this space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
See all scripts in the space | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Open a script | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Delete a script |
Yes |
Yes |
No | No | No | No | No | No |
View load script in Editor | Yes | Yes | No | No | No | No | No | Yes |
View script history in Editor | Yes | Yes | No | No | No | No | No | Yes |
Preview and download earlier versions in History | Yes | Yes | No | No | No | No | No | Yes |
Edit script attributes (change name, description, and tags) | Yes | Yes | No | No | No | No | No | Yes |
Reload the app and create scheduled reloads | Yes | Yes | No | No | No | No | No | Yes |
Data sources actions
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
List and use data source in the space | Yes | Yes | No | No | No | No | Yes | Yes |
Create data sources in the space | Yes | Yes | No | No | No | No | No | Yes |
Edit data connections in the space To edit a data connection, the user must be the connection owner. User credentials are cleared each time a connection is edited. |
Yes | Yes | No | No | No | No | No | Yes |
Duplicate data files in the space | Yes | Yes | No | No | No | No | No | Yes |
Move data files | Yes | Yes | No | No | No | No | No | Yes |
Delete data source from the space | Yes | Yes | No | No | No | No | No | Yes |
Profile data source | Yes | Yes | No | No | No | No | No | Yes |
Edit and apply properties to data source in the space | Yes | Yes | No | No | No | No | No | Yes |
Create app from data source | No | No | No | No | No | No | No | No |
Open data connection or file for app reload | Yes | Yes | No | No | No | No | Yes | Yes |
Binary load from apps inside space | Yes | No | No | No | No | No | Yes | No |
AutoML actions
The ability to perform actions in Qlik AutoML is controlled by:
-
Space roles
-
User entitlement
-
Assignment of built-in security roles
-
Assignment of permissions via the User Default and custom roles
For more information, see Who can work with Qlik AutoML.
Permissions related to using prediction data (for example, opening or profiling the dataset, or using it in an app) are generally the same as data sources actions.
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
List ML deployments in the space You also need one of the following roles:
|
Yes | Yes | No | Yes | Yes | No | No | Yes |
Open ML deployment You also need one of the following roles:
|
Yes | Yes | No | Yes | Yes | No | No | Yes |
Create ML deployment You also need one of the following roles:
|
Yes | No | Yes | No | No | No | No | No |
Duplicate ML deployment You cannot duplicate an ML deployment in a managed space. |
No | No | No | No | No | No | No | No |
Delete ML deployment You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Edit ML deployment You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Create, edit, and delete prediction configurations You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Create, edit, and delete prediction schedules You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Change the owner of a prediction configuration You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Run prediction (from configuration, real-time API, or Qlik AutoML connector) You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | Yes | No |
Move ML deployment to the space You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Move ML deployment to another space You also need the Automl Deployment Contributor role. |
Yes | Yes | No | No | No | No | No | No |
Activate and deactivate the source model from an ML deployment You also need the Automl Deployment Contributor role and one of the following:
|
Yes | Yes | No | No | No | No | No | No |
Business glossary actions for all user entitlements
The Steward user role is assigned to users by an administrator. This security role is used to control user access to business glossary features. Some business glossary actions do not require the Steward role.
Users who have the Can view role in a space or have the glossary shared with them can view terms in the glossary. Users who have the Can contribute or Can manage permissions in the space can edit unverified terms.
Users with Professional or Full User entitlement, as well as users with Analyzer entitlement, can work with business glossaries.
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
List glossaries in the space | Yes | Yes | No | Yes | Yes | Yes | No | No |
Open a glossary (details page only) | Yes | Yes | No | Yes | Yes | Yes | No | No |
View glossary and terms | Yes | Yes | No | Yes | No | Yes | No | No |
Move glossary from this space You also need the Steward role. |
Yes | Yes | No | Yes | No | No | No | No |
Move glossary to this space You also need the Steward role. |
Yes | Yes | No | Yes | No | No | No | No |
Create a glossary You also need the Steward role. |
Yes | Yes | Yes | No | No | No | No | No |
Edit glossary settings and page You also need the Steward role. |
Yes | Yes | Yes | No | No | No | No | No |
Delete a glossary You also need the Steward role. |
Yes | Yes | Yes | No | No | No | No | No |
Add a term in glossary | Yes | Yes | Yes | No | No | No | No | No |
Edit term not in Verified state | Yes | Yes | Yes | No | No | No | No | No |
Edit term in Verified state You also need the Steward role. |
Yes | Yes | Yes | No | No | No | No | No |
Delete term not in Verified state | Yes | Yes | Yes | No | No | No | No | No |
Delete term in Verified state You also need the Steward role. |
Yes | Yes | Yes | No | No | No | No | No |
Change state of a term to/from Verified You also need the Steward role. |
Yes | Yes | Yes | No | No | No | No | No |
Change state of a term between states other than Verified | Yes | Yes | Yes | No | No | No | No | No |
Create, edit, delete categories | Yes | Yes | Yes | No | No | No | No | No |
Notes actions
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Add notes |
Yes | Yes |
No |
Yes | Yes | Yes | No | Yes |
List all notes in the space To view the contents of a note, the note must be shared with the user at the note level. Space members can access a note if the note has been shared with them individually. |
Yes | Yes | No | No | No | No | No | No |
Delete notes in the space The note owner can also delete the note. |
Yes | Yes | No | No | No | No | No | No |
Qlik Answers actions
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restrictive view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Chat with an assistant |
Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Create new assistants | Yes | Yes | No | No | No | No | No | No |
Move assistants to the space | Yes | Yes | No | Yes | No | No | No | No |
Move assistants to another space | Yes | Yes | No | Yes | No | No | No | No |
Open an assistant | Yes | Yes | No | Yes | Yes | Yes | No | Yes |
Delete an assistant | Yes | Yes | No | Yes | No | No | No | No |
Edit an assistant | Yes | Yes | No | Yes | No | No | No | No |
Add and remove knowledge bases | Yes | Yes | No | Yes | No | No | No | No |
Review answers and feedback Information noteThis also requires the Audit Admin user role.
|
Yes | Yes | No | Yes | Yes | No | No | No |
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restrictive view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Create knowledge bases | Yes | Yes | No | Yes | No | No | No | No |
Move knowledge bases to the space | Yes | Yes | No | Yes | No | No | No | No |
Move knowledge bases to another space | Yes | No | No | Yes | No | No | No | No |
Open a knowledge base | Yes | Yes | No | Yes | Yes | No | No | No |
Delete a knowledge base | Yes | Yes | No | Yes | No | No | No | No |
Edit a knowledge base | Yes | Yes | No | Yes | No | No | No | No |
Index sources | Yes | Yes | No | Yes | No | No | No | Yes |
Set up an index schedule | Yes | Yes | No | Yes | No | No | No | Yes |
Get answers from knowledge bases using an assistant | Yes | Yes | No | Yes | Yes | Yes | Yes | No |
View sources from knowledge base | Yes | Yes | No | Yes | Yes | Yes | Yes | No |
Other content actions
Action | Owner (Space) | Can manage | Can publish | Can contribute | Can view | Has restricted view | Can consume data | Can operate |
---|---|---|---|---|---|---|---|---|
Create, edit, and delete generic links | Yes | Yes | No | No | No | No | No | No |