Initializing help system before first use

Pre-Configured System Authorities List

The pre-configured system authorities are used by Xpress Insight as part user administration.

The following table lists the pre-configured system authorities and the actions that they allow the user to perform using the web client and the Xpress Insight Admin interface.

Note: The authorities required to invoke a client API method directly are described in the client API javadoc.
Authority Capabilities Explanation Related Requirements
APP_ALL Grants the user implicit membership of all apps in the system. If the user performs any actions that result in the user owning an object in the app, then the user is automatically granted explicit membership of the app.
APP_ATTACHMENT_EDIT User can upload, edit, and delete attachments on an app.
APP_ATTACHMENT_VIEW User can download the attachments on an app. App members without this authority can view information about app attachments, but they cannot download them.
APP_DELETE Allows the user to delete an app and all of its contents. All of the contents of the app must be accessible to the user and editable by the user. The user must be a member of the app, or have APP_ALL authority.
APP_EDIT Allows the user to edit the name of the app. The user must be a member of the app, or have APP_ALL authority.
APP_IMPORT Allows the user to import one or more apps into the current repository—imported objects are owned by the importing user. If a user with APP_IMPORT authority but not SYS_IMPORTEXPORT attempts to import a full repository, only the individual apps are imported.
APP_NEW Allows the user to create a new app.

The creator is granted app membership.

DEVELOPER Enables the developer-only actions on the developer menu:
  • Troubleshooting
  • Activity Pane
  • Client-Server Performance Profiler
  • Server Event Log
  • Scenario Data Summary
  • Export Job**
  • Update Companion File
  • Update BIM File
  • Update Model Resources
  • Update Client
  • Resources
  • Regenerate Mirror Database
  • Clear Mirror Database
For more information on these actions, see the Xpress Insight Developer Guide. The SCENARIO_EXEC authority (listed in this table) is also required for the Export Job option.
DIRECT_DATA_VIEW Grants the user access to the entity explorer view. It is included in the AdvancedUser, Developer, and SystemAdministrator authority groups by default, and you can add it to the custom authority groups.
FOLDER_DELETE User can delete a folder and its contents, including any sub-folders and scenarios. The action is refused if the folder or any of its contents are not editable or accessible by the user. The user must be a member of the app containing the folder, or have APP_ALL authority.
FOLDER_EDIT User can edit the name, owner, and share status of the folder. User can edit the owner and share status of the contents of the folder, provided all the contents of the folder are accessible to the user and editable by the user. The user must be a member of the app containing the folder, or have APP_ALL authority.
FOLDER_NEW User can create a new folder in the app root.

Allows the user to create a new folder as a sub-folder of an existing parent folder, providing the user has access to the parent folder.

Allows the user to move a folder to the app root, provided the user has access to the folder.

Allows the user to move a folder to a destination folder, provided the user has access to the destination folder.

The user must be a member of the app containing the folder, or have APP_ALL authority.
FOLDER_OWNER Controls whether a user can change the owner of a folder.
FOLDER_SHARE Controls whether a user can change the share status of a folder.
SCENARIO_ALL Grants the user access to all scenarios and folders in an app including any that are owned by other users and not shared. The user must be a member of the app to gain access to the scenarios and folders, or have APP_ALL authority.
SCENARIO_DELETE User can delete a scenario.

The scenario must be accessible and editable by the user.

The user must be a member of the app containing the scenario, or have APP_ALL authority.
SCENARIO_EDIT User can rename the scenario and edit the scenario notes.

User can edit the scenario input data.

User can set the ownership and share status of the scenario.

The scenario must be accessible and editable by the user.

SCENARIO_ATTACHMENT_EDIT User can upload, edit, and delete attachments on a scenario.
SCENARIO_EXEC User can queue a scenario for execution, if the scenario is accessible and editable. User can pause, resume, cancel existing jobs for the scenario. To pause, resume, cancel existing jobs, the scenario must be accessible. The user must be a member of the app containing the scenario, or have APP_ALL authority.
SCENARIO_NEW User can create a new scenario, or create a copy of an existing accessible scenario. Allows the user to move a scenario to the app root or an accessible destination folder. The user must be a member of the app containing the scenario, or have APP_ALL authority.
SCENARIO_OWNER Controls whether a user can change the owner of a scenario.
SCENARIO_SHARE Controls whether a user can change the share status of a scenario
SYS_USER Grants access to the user management functionality of the Xpress Insight Admin interface. Allows the user to add a new user, edit existing users, edit the assignment of authority groups to a user, edit the assignment of authorities to an authority group, and grant and revoke membership of a user to an app.
SYS_IMPORTEXPORT User can export the content of the repository and to import a previously exported repository.
SYS_SERVER User can configure LDAP, view Logs, and access the Tableau tab with its corresponding functionality.
SYS_SERVICES User can add new optimization services. Allows the user to delete existing optimization services.

Allows the user to edit the connection string and capacity of existing optimization services.

Enables the administrator-only actions on the Admin menu: Optimization Services.

SYS_SESSIONS User can terminate all client sessions other than the users own session.
WORKBOOK_PUBLISH User can publish a workbook from within the Web Client.

Tableau must also be enabled within Xpress Insight and for the user.

For FICO® Platform deployments, users with this authority are also able to edit Tableau workbooks.
Note: Only managed Tableau workbooks can be published from within Xpress Insight. See the FICO Xpress Insight Developers Guide for more details on managed and un-managed Tableau workbooks.
Parent Topic Reviewing the Pre-Configured System Authorities

© 2001-2023 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.