Applies to: Kyvos Enterprise  Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace

Kyvos Azure Marketplace   Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)

A role grants permission to access a set of functionality. The default roles have a hierarchy of access. The higher-level roles can also access the functionality of the roles below them.

The default roles are Administrator, Designer, Business User, and End User. You can also create custom roles. 

The Query Playground feature will only be accessible to users with the ‘Semantic Model Execute’ privilege and the new ‘Query Playground’ privilege, ensuring that access is restricted to authorized users.

By default, the End User role does not have access to the Query Playground. However, all other predefined roles—Administrator, Designer, and Business User—are granted access by default.

From Kyvos 2025.8 onwards, user management is now more secure when the USER_MANAGEMENT_MODE property is set to SAAS. With this setting, logged-in users can manage users and groups within their group.

Default Roles

The following lists describe what the default roles can do:

Administrator

• Set system-level configurations

• Perform cluster management activities

• Perform resource allocation

• Monitor activities

• Set up standardized datasets such as country names

• Deploy cab files

• Datasets 

• Manage users

• Share registered files with a designer

• Share entities with all the other roles

• Design reports

• Design dashboards

• Kyvos Reporting Service

• Query Playground

Designer

• Design semantic models

• Share any design-related entity with the other roles

• Design reports and dashboards

Business User

• Design reports and dashboards

• View dashboards

• Apply linking and global filters

End User - default user role

• View reports (no design access, just view/run reports)

To add a role, perform the following steps: 

1. From the Toolbox, select Setup, then Roles.

2. Click the Add Role button, which is the plus symbol next to the Roles column name.

3. Enter the role name.

4. Select one or more privileges. 

   • If a Privilege group has a minus symbol, that means selected privileges within that group are selected.

   • If a Privilege group has a checkmark, all privileges in that group are selected.

   • Hover the cursor over a privilege to view a brief description.

5. Add an optional description of the group.

Hierarchy

The Roles are shown in their hierarchy of access. The Administrator role, by default, also encompasses the Designer, Business User, and End User.

Open

Hierarchy of access

Open

Related topics

• Custom roles

• Setting up notifications

• Privileges