Managing permissions in shared spaces
Permissions in spaces are controlled by roles assigned to members when they are added to a space. A role assigned to a member of a space gives that member a set of permissions inside that space and on resources inside the space.
Any cloud hub member with a professional license can create a space. When you create a space, you are assigned the Owner permission. Owners can then add new members to the space and assign them permissions. Space permissions are managed in Manage members. In Manage members, you can search for cloud hub members, assign them permissions, and add them to your shared space.
Member permissions can be changed to give them a new role in a space. A user with Can view permission might be changed to an app developer by changing their permission to Can edit. Member permissions can be changed by space owners and members with Can manage permissions.
Members can be removed from a space in Manage members by clicking the delete icon beside the member.
You can check your permissions in a shared space by clicking Manage members. If you do not see Manage members, you have Can view, Can edit, or Can Consume data permission for the space.
Space permissions and app ownership
Roles in a shared space give users permissions and access rules in a shared space. Whether or not you are the owner of the app you are working with determines additional permissions.
The app owner is the user who has created the app. The app owner is the only user who can:
- Edit data in Data model viewer, Data load editor, or Data manager.
- Customize the app business logic
Space permissions override app ownership. If an app is moved to a space that the app owner does not have permission to access, then the app owner cannot access the app. If the app owner's permission in a space is changed to Can view or Can Consume data, they will lose the ability to add data to the app and reload the app. When moving an app between spaces, ensure the app owner has Can edit, Can manage, or Owner permissions in the destination space, if you want the app owner to still manage reloading the app and the data model.
Permissions in a shared space
Permissions can be assigned by Owner and Can manage users. What shared space permissions enable you to do depends on if you have a professional or an analyzer license assigned to you by your tenant administrator. If your tenant administrator has enabled groups, you can also add groups of users to your space.
If a member has different individual permission and group permission in a space, the highest permission level is applied.
Permissions for members with professional licenses
The following tables outline what members with the professional license can do in a space:
| Role | |||||
|---|---|---|---|---|---|
| Action | Owner | Can manage | Can edit | Can view | Can consume data |
| Rename the space | Yes | Yes | No | No | No |
| Create new apps in the space | Yes | Yes | Yes | No | No |
| Move apps to another space | Yes | Yes | Yes | No | No |
| Move apps to the space | Yes | Yes | Yes | No | No |
| Duplicate apps in the space | Yes | Yes | Yes | No | No |
| Export apps in the space | Yes | Yes | Yes | No | No |
| Add members to the space | Yes | Yes | No | No | No |
| Change member permissions for the space (Owner, Can manage, Can edit, Can view) | Yes | Yes | No | No | No |
| Remove members from the space | Yes | Yes | No | No | No |
| Add and edit data sources in the space | Yes | Yes | Yes | No | No |
| Delete the space | Yes | Yes | No | No | No |
| Role | |||||
|---|---|---|---|---|---|
| Action | Owner | Can manage | Can edit | Can view | Can consume data |
| Open an app | Yes | Yes | Yes | Yes | No |
| Delete an app | Yes | Yes | Yes | No | No |
|
Open Data model viewer |
Yes | Yes | Yes | No | No |
| Open and edit the data model in Data load editor or Data manager Information noteThe user must be the app owner. |
Yes | No | No | No | No |
| Add data files to a space in Data load editor and Data manager Information noteThe user must be the app owner. |
Yes | No | No | No | No |
| Edit app attributes (change name, description, and tags) | Yes | Yes | Yes | No | No |
| Edit app properties (select theme, enable right-to-left reading order, set a bookmark as app default, and sheet title styling) | Yes | Yes | Yes | No | No |
|
Reload the app |
Yes | Yes | Yes | No | No |
|
Create, edit, and delete master items and variables |
Yes | Yes | Yes | No | No |
|
Create, edit, and delete media library content |
Yes | Yes | Yes | No | No |
| Add private sheets to the app | Yes | Yes | Yes | No | No |
| Add private bookmarks and stories to the app | Yes | Yes | Yes | Yes | No |
| Make private sheets, bookmarks, and stories public in the app | Yes | Yes | Yes | No | No |
| Make public sheets, bookmarks, and stories private in the app | Yes | Yes | Yes | No | No |
| Take snapshots in the app | Yes | Yes | Yes | Yes | No |
| Make snapshots public | Yes | Yes | Yes | No | No |
| View on-demand app navigation links | Yes | Yes | Yes | Yes | No |
| Create or update app navigation on-demand links | Yes | Yes | Yes | No | No |
| Open on-demand selection apps | Yes | Yes | Yes | Yes | No |
| Generate on-demand apps | Yes | Yes | Yes | Yes | No |
| Create dynamic views | Yes | Yes | Yes | No | No |
| Add dynamic charts to sheets | Yes | Yes | Yes | No | No |
| Monitor a visualization in the cloud hub | Yes | Yes | Yes | Yes | No |
|
Customize the app business logic Information noteThe user must be the app owner.
|
Yes | Yes | Yes | No | No |
| Role | |||||
|---|---|---|---|---|---|
| Action | Owner | Can manage | Can edit | Can view | Can consume data |
| List and use data source in the space | Yes | Yes | Yes | No | Yes |
| Create data source in the space | Yes | Yes | Yes | No | No |
| Duplicate data files in the space | Yes | Yes | Yes | No | No |
| Move data files between spaces | Yes | Yes | Yes | No | No |
| Delete data source from the space | Yes | Yes | Yes | No | No |
|
Edit data connection in the space Information noteThe user must be the connection owner.
|
Yes | Yes | Yes | No | No |
| Profile data source | Yes | Yes | Yes | No | No |
| Edit and apply properties to data source in the space | Yes | Yes | Yes | No | No |
| Create app from data source | Yes | Yes | Yes | No | No |
| Open data connection or file for app reload | Yes | Yes | Yes | No | Yes |
| Binary load from apps inside space | Yes | Yes | Yes | No | Yes |
Permissions for members with analyzer licenses
The following tables outline what members with an analyzer license can do in a space:
| Role | |||||
|---|---|---|---|---|---|
| Action | Owner | Can manage | Can edit | Can view | Can consume data |
| Export apps in the space | Yes | Yes | Yes | No | No |
| Move apps to another space | Yes | Yes | Yes | No | No |
| Move apps to the space | Yes | Yes | Yes | No | No |
| Action | Owner | Can manage | Can edit | Can view | Can consume data |
|---|---|---|---|---|---|
| Open an app | Yes | Yes | Yes | Yes | No |
| Delete an app | Yes | Yes | Yes | No | No |
|
Edit app attributes (change name, description, and tags) |
Yes | Yes | Yes | No | No |
|
Edit app properties (select theme, enable right-to-left reading order, set a bookmark as app default, and sheet title styling) |
Yes | Yes | Yes | No | No |
| Add private bookmarks and stories to the app | Yes | Yes | Yes | Yes | No |
| Take snapshots in the app | Yes | Yes | Yes | Yes | No |
| View on-demand app navigation links | Yes | Yes | Yes | Yes | No |
| Open on-demand selection apps | Yes | Yes | Yes | Yes | No |
| Generate on-demand apps | Yes | Yes | Yes | Yes | No |
| Create dynamic views | Yes | Yes | Yes | No | No |
| Add dynamic charts to sheets | Yes | Yes | Yes | No | No |
| Monitor a visualization in the cloud hub | Yes | Yes | Yes | Yes | No |
| Action | Owner | Can manage | Can edit | Can view | Can consume data |
|---|---|---|---|---|---|
| List and use data source in the space | Yes | Yes | Yes | No | Yes |
| Create data source in the space | No | No | No | No | No |
| Delete data source from the space | Yes | Yes | Yes | No | No |
| Edit data source in the space | No | No | No | No | No |
| Profile data source | Yes | Yes | Yes | No | No |
| Edit and apply properties to data source in the space | Yes | Yes | Yes | No | No |
| Create app from data source | Yes | Yes | Yes | No | No |
| Open data connection or file for app reload | Yes | Yes | Yes | No | Yes |
| Binary load from apps inside space | Yes | Yes | Yes | No | Yes |