Custom roles

Applies to: Kyvos Enterprise Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace

Kyvos Azure Marketplace Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)

Custom roles allow you to control access to the features of Kyvos. When you assign a custom role to users or groups, they have only the privileges that you have specified.

Privileges interact with security access rights. You can grant a role the privilege to do something, but the user won't be able to see or act on data they don't have access rights to.

From Kyvos 2024.3 onwards, the Kyvos Reporting privilege is automatically granted to Administrators. Furthermore, Administrators can assign this privilege to custom roles. This privilege enables users to access the Kyvos Reporting option in the Utilities menu. When Kyvos Reporting is selected, the Kyvos Reporting Dashboard automatically logs in and displays options according to the roles and privileges assigned to the user. The Kyvos Reporting signs out when you sign out the Kyvos application.

There are two ways to create custom roles:

Copy an existing role and modify it to set up a new role-specific to your business needs.
Create a new role and select which privileges you want that role to have. By default, a few privileges related to using workbooks and drilling through data are enabled. The ability to receive selected notifications is also enabled. There's a wide variety of privileges that you can choose from to create the types of roles you need.

To create a new custom role, perform the following steps.

From the Toolbox, select Setup, then Roles.
Click the plus symbol next to the Roles column name.
Enter a name and an optional description.
Select the privileges you want the role to have.
Click Save.

To duplicate an existing role, perform the following steps.

From the Toolbox, select Setup, then Roles.
Right-click an existing role and choose Duplicate.
Rename the new role.
Edit the role to suit your business needs and click Save.

Note

Duplicate the pre-created Kyvos roles: Business User, Designer, and End User, and modify the copy to make changes to the privileges. You can't modify the privileges of the original role.

For some roles, the bottom of the window mentions what that role is also allowed to do that isn't controlled by permissions. For example, when viewing the Administrator role, you will see it can also manage users, groups, roles, licenses, and semantic model resource allocation.

Searching users and groups

You can access a comprehensive list of all users and groups assigned to a particular role on the 'Role' screen. You can conveniently browse through the list of users and groups associated with that role effortlessly. In addition, you can use the search box to perform a simple search and quickly find a specific user or group assigned to that role.

To search for a user or a group, perform the following steps.

Click the users or groups link next to the Roles that show the number of users or groups assigned to that role.
You can either select the user or group from the list or, for quick navigation, use the search bar.

Related topics