Pre-Configured System Authorities List
The following table lists the pre-configured system authorities and the actions that they allow the user to perform using the web client and the Xpress Insight Admin interface.
|
Note The authorities required to invoke a client API method directly are described in the client API javadoc.
|
| Authority | Explanation |
|---|---|
| APP_ALL | Grants the user implicit membership of all apps in the system. If the user performs any actions that result in the user owning an object in the app, then the user is automatically granted explicit membership of the app. |
| APP_ATTACHMENT_EDIT | A user must have APP_ATTACHMENT_EDIT to upload, edit, and delete attachments on an app. |
| APP_ATTACHMENT_VIEW | A user must have APP_ATTACHMENT_VIEW to download the attachments on an app. App members without this authority can view information about app attachments, but they cannot download them. |
| APP_DELETE | Allows the user to delete an app and all of its contents. All of the contents of the app must be accessible to the user and editable by the user. The user must be a member of the app or have APP_ALL authority. |
| APP_EDIT | Allows the user to edit the name of the app. The user must be a member of the app, or have APP_ALL authority. |
| APP_IMPORT | Allows the user to import one or more apps into the current repository. Imported objects are owned by the importing user. If the user with APP_IMPORT but not SYS_IMPORTEXPORT attempts to import a full repository, then only the individual apps are imported. |
| APP_NEW | Allows the user to create a new app. The creator is granted app membership. |
| DEVELOPER | Enables the developer-only actions on the developer menu:
For more information on these actions, see the Xpress Insight Developer Guide.
Note **The SCENARIO_EXEC authority (listed in this table) is also required for the "Export Job" option.
|
| DIRECT_DATA_VIEW | Grants the user access to the entity explorer view. It is included in the advanced user, developer, and administrator authority groups by default, and you can add it to the custom authority groups. |
| FOLDER_DELETE | Allows the user to delete a folder and its contents, including any sub-folders and scenarios. The action is refused if the folder or any of its contents are not editable or accessible by the user. The user must be a member of the app containing the folder, or have APP_ALL authority. |
| FOLDER_EDIT | Allows the user to edit the name, owner, and share status of the folder. Allows the user to edit the owner and share status of the contents of the folder, provided all the contents of the folder are accessible to the user and editable by the user. The user must be a member of the app containing the folder, or have APP_ALL authority. |
| FOLDER_NEW | Allows the user to create a new folder in the app root. Allows the user to create a new folder as a sub-folder of an existing parent folder, providing the user has access to the parent folder. Allows the user to move a folder to the app root, provided the user has access to the folder. Allows the user to move a folder to a destination folder, provided the user has access to the destination folder. The user must be a member of the app containing the folder, or have APP_ALL authority. |
| FOLDER_OWNER | Controls whether a user can change the owner of a folder. |
| FOLDER_SHARE | Controls whether a user can change the share status of a folder. |
| SCENARIO_ALL | Grants the user access to all scenarios and folders in an app including any that are owned by other users and not shared. The user must be a member of the app to gain access to the scenarios and folders, or have APP_ALL authority. |
| SCENARIO_DELETE | Allows the user to delete a scenario. The scenario must be accessible and editable by the user. The user must be a member of the app containing the scenario, or have APP_ALL authority. |
| SCENARIO_EDIT | Allows the user to rename the scenario and edit the scenario notes. Allows the user to edit the scenario input data. Allows the user to set the ownership and share status of the scenario. The scenario must be accessible and editable by the user. |
| SCENARIO_ATTACHMENT_EDIT | A user must have SCENARIO_ATTACHMENT_EDIT to upload, edit, and delete attachments on a scenario. |
| SCENARIO_EXEC | Allows the user to queue a scenario for execution. To queue a scenario for execution requires that the scenario be accessible and editable. Allows the user to pause, resume, cancel existing jobs for the scenario. To pause, resume, cancel existing jobs, the scenario must be accessible. The user must be a member of the app containing the scenario, or have APP_ALL authority. |
| SCENARIO_NEW | Allows the user to create a new scenario, or create a copy of an existing accessible scenario. Allows the user to move a scenario to the app root or an accessible destination folder. The user must be a member of the app containing the scenario, or have APP_ALL authority. |
| SCENARIO_OWNER | Controls whether a user can change the owner of a scenario. |
| SCENARIO_SHARE | Controls whether a user can change the share status of a scenario |
| SYS_USER | Grants access to the user management functionality of the Xpress Insight Admin interface. Allows the user to add a new user, edit existing users, edit the assignment of authority groups to a user, edit the assignment of authorities to an authority group, and grant and revoke membership of a user to an app. |
| SYS_IMPORTEXPORT | Allows the user to export the content of the repository and to import a previously exported repository. |
| SYS_SERVER | Allows the user to see configuration operations, such as access to the Tableau tab and its corresponding functionality located in this tab. |
| SYS_SERVICES | Allows the user to add new optimization services. Allows the user to delete existing optimization services. Allows the user to edit the connection string and capacity of existing optimization services. Enables the administrator-only actions on the Admin menu: Optimization Services. |
| SYS_SESSIONS | Allows the user to terminate all client sessions other than the users own session. |
| WORKBOOK_PUBLISH | Allows the user to publish a workbook from within the Web Client. Tableau must also be enabled within Xpress Insight and for the user. For Decision Management Platform (DMP) deployments, users with this authority are also able to edit Tableau workbooks.
Note Only managed Tableau workbooks can be published from within
Xpress Insight. See the
FICO Xpress Insight Developers Guide for more details on managed and unmanaged Tableau workbooks.
|