Roles
Applies to: Kyvos Enterprise Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace
Kyvos Azure Marketplace Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)
A role grants permission to access a set of functionality. The default roles have a hierarchy of access. The higher-level roles can also access the functionality of the roles below them.
The default roles are Administrator, Designer, Business User, and End User. You can also create custom roles.
Note
The administrator role cannot be deleted, and the default permissions of the administrator and end-user roles can't be changed.
The Query Playground feature will only be accessible to users with the ‘Semantic Model Execute’ privilege and the new ‘Query Playground’ privilege, ensuring that access is restricted to authorized users.
By default, the End User role does not have access to the Query Playground. However, all other predefined roles—Administrator, Designer, and Business User—are granted access by default.
From Kyvos 2025.8 onwards, user management is now more secure when the USER_MANAGEMENT_MODE property is set to SAAS. With this setting, logged-in users can manage users and groups within their group.
Default Roles
The following lists describe what the default roles can do:
Administrator
Set system-level configurations
Perform cluster management activities
Perform resource allocation
Monitor activities
Set up standardized datasets such as country names
Deploy cab files
Datasets
Manage users
Share registered files with a designer
Share entities with all the other roles
Design reports
Design dashboards
Kyvos Reporting Service
Query Playground
Designer
Design semantic models
Share any design-related entity with the other roles
Design reports and dashboards
Business User
Design reports and dashboards
View dashboards
Apply linking and global filters
End User - default user role
View reports (no design access, just view/run reports)
To add a role, perform the following steps:
From the Toolbox, select Setup, then Roles.
Click the Add Role button, which is the plus symbol next to the Roles column name.
Enter the role name.
Select one or more privileges.
If a Privilege group has a minus symbol, that means selected privileges within that group are selected.
If a Privilege group has a checkmark, all privileges in that group are selected.
Hover the cursor over a privilege to view a brief description.
Add an optional description of the group.
Hierarchy
The Roles are shown in their hierarchy of access. The Administrator role, by default, also encompasses the Designer, Business User, and End User.
Hierarchy of access
Related topics