Initial access permissions for capabilities

Adaptive Analytics capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 1. Adaptive Analytics capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Adaptive Analytics Administrators	X		X
Adaptive Analytics Users	X		X
Directory Administrators		X	X

Administration capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 2. Administration capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Directory Administrators	X	X	X
Portal Administrators	X		X
Report Administrators	X		X
Server Administrators	X		X
Metrics Administrators	X		X
Planning Rights Administrators	X		X
Adaptive Analytics Administrators	X		X
Controller Administrators	X		X
PowerPlay® Administrators	X		X
Library Administrators	X		X
Mobile Administrators	X		X

The secured features in the following table are children of the Administration capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 3. Secured features of the Administration capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Adaptive Analytics Administration	Adaptive Analytics Administrators	X		X
Adaptive Analytics Administration	Directory Administrators		X	X
Administration tasks	Server Administrators	X		X
	Report Administrators	X		X
	Metrics Administrators	X		X
	Controller Administrators	X		X
	Directory Administrators		X	X
	PowerPlay Administrators	X		X
Configure and manage the system	Server Administrators	X		X
Configure and manage the system	Directory Administrators		X	X
Controller Administration	Controller Administrators	X		X
Controller Administration	Directory Administrators		X	X
Data Sources Connections	Directory Administrators	X	X	X
Distribution Lists and Contacts	Directory Administrators	X	X	X
Metric Studio Administration	Metrics Administrators	X		X
Metric Studio Administration	Directory Administrators		X	X
Mobile Administration	Directory Administrators		X	X
Mobile Administration	Mobile Administrators	X		X
My Data Sets Administration	Directory Administrators		X	X
My Data Sets Administration	Server Administrators	X		X
Planning Administration	Planning Rights Administrators	X		X
Planning Administration	Directory Administrators		X	X
PowerPlay Servers	Directory Administrators		X	X
PowerPlay Servers	PowerPlay Administrators	X		X
Printers	Directory Administrators	X	X	X
Query Service Administration	Directory Administrators		X	X
Query Service Administration	Server Administrators	X		X
Run activities and schedules	Report Administrators	X		X
	Metrics Administrators	X		X
	Controller Administrators	X		X
	Directory Administrators		X	X
	PowerPlay Administrators	X		X
Set capabilities and manage UI profiles	Directory Administrators	X	X	X
Styles and portlets	Portal Administrators	X		X
	Directory Administrators		X	X
	Library Administrators	X		X
Users, Groups, and Roles	Directory Administrators	X	X	X

Analysis Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 4. Analysis Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Report Administrators	X		X
Authors	X		X
Analysis Users	X		X
Directory Administrators		X	X

Cognos Insight capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 5. Cognos Insight capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Cognos® Insight Users			X		X
Directory Administrators				X	X

Cognos Viewer capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 6. Cognos Viewer capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Analysis Users	X		X
Authors	X		X
Consumers	X		X
Directory Administrators		X	X
Express Authors	X		X
PowerPlay Administrators	X		X
PowerPlay Users	X		X
Query Users	X		X
Readers	X		X
Report Administrators	X		X

The secured features in the following table are children of the Cognos Viewer capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 7. Secured features of the Cognos Viewer capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Context Menu Selection Toolbar	Report Administrators	X		X
	Authors	X		X
	Consumers	X		X
	Query Users	X		X
	Analysis Users	X		X
	Readers	X		X
	Express® Authors	X		X
	Directory Administrators		X	X
	PowerPlay Administrators	X		X
	PowerPlay Users	X		X
Run With Options	Report Administrators	X		X
	Authors	X		X
	Consumers	X		X
	Query Users	X		X
	Analysis Users	X		X
	Express Authors	X		X
	Directory Administrators		X	X
	PowerPlay Administrators	X		X
	PowerPlay Users	X		X

Collaborate capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 8. Collaborate capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Analysis Users	X		X
Authors	X		X
Consumers	X		X
Directory Administrators		X	X
Express Authors	X		X
PowerPlay Administrators	X		X
PowerPlay Users	X		X
Query Users	X		X
Readers	X		X
Report Administrators	X		X

The secured features in the following table are children of the Collaborate capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 9. Secured features of the Collaborate capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Allow collaboration features Launch collaboration tools	Analysis Users	X		X
	Authors	X		X
	Consumers	X		X
	Directory Administrators		X	X
	Express Authors	X		X
	PowerPlay Administrators	X		X
	PowerPlay Users	X		X
	Query Users	X		X
	Report Administrators	X		X

Controller Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 10. Controller Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Controller Users	X		X
Controller Administrators	X		X
Directory Administrators		X	X

Data Manager capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 11. Data Manager capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Data Manager Authors			X		X
Directory Administrators				X	X

Detailed Errors capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 12. Detailed Errors capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X

Drill Through Assistant capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 13. Drill Through Assistant capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X

Event Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 14. Event Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Report Administrators	X		X
Authors	X		X
Metrics Administrators	X		X
Metrics Authors	X		X
Directory Administrators		X	X

Execute Indexed Search capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 15. Execute Indexed Search capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Analysis Users	X		X
Authors	X		X
Consumers	X		X
Directory Administrators		X	X
Express Authors	X		X
PowerPlay Administrators	X		X
PowerPlay Users	X		X
Query Users	X		X
Readers	X		X
Report Administrators	X		X

Executive Dashboard capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 16. Executive Dashboard capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Analysis Users	X		X
Authors	X		X
Consumers	X		X
Directory Administrators		X	X
Express Authors	X		X
Query Users	X		X
Readers	X		X
Report Administrators	X		X
PowerPlay Administrators	X		X
PowerPlay Users	X		X

The secured features in the following table are children of the Executive Dashboard capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 17. Secured features of the Executive Dashboard capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Use Advanced Dashboard Features Use Interactive Dashboard Features	Authors	X		X
	Directory Administrators		X	X
	Query Users	X		X
	Report Administrators	X		X

External Repositories capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 18. External Repositories capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Everyone			X		X

The secured features in the following table are children of the External Repositories capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 19. Secured features of the External Repositories capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Manage repository connections	Directory Administrators		X	X
View external documents	Directory Administrators		X	X
View external documents	Everyone	X		X

Generate CSV Output

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 20. Generate CSV Output capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Everyone			X		X

Generate PDF Output

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 21. Generate PDF Output capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Everyone			X		X

Generate XLS Output

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 22. Generate XLS Output capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Everyone			X		X

Generate XML Output

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 23. Generate XML Output capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Everyone			X		X

Glossary capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 24. Glossary capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Everyone			X		X
Directory Administrators				X	X

Hide Entries capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 25. Hide Entries capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Everyone			X		X
Directory Administrators				X	X

Import relational metadata capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 26. Import relational metadata capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Report Administrators			X		X

Lineage capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 27. Lineage capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Everyone			X		X
Directory Administrators				X	X

Manage own data source signons capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 28. Manage own data source signons capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X

Metric Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 29. Metric Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Metrics Administrators	X		X
Metrics Users	X		X
Metrics Authors	X		X
Directory Administrators		X	X

The secured features in the following table are children of the Metric Studio capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 30. Secured features of the Metric Studio capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Edit View	Metrics Administrators	X		X
	Metrics Authors	X		X
	Directory Administrators		X	X

Mobile capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 31. Mobile capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Mobile Users	X		X
Mobile Administrators	X		X
Directory Administrators		X	X

My Data Sets capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 32. My Data Sets capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X
Everyone			X		X

Planning Contributor capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 33. Planning Contributor capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Planning Contributor Users	X		X
Planning Rights Administrators	X		X
Directory Administrators		X	X

PowerPlay Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 34. PowerPlay Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Authors	X		X
Directory Administrators		X	X
PowerPlay Administrators	X		X
PowerPlay Users	X		X

Query Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 35. Query Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Authors	X		X
Query Users	X		X
Report Administrators	X		X
Directory Administrators		X	X

The secured features in the following table are children of the Query Studio capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 36. Secured features of the Query Studio capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Create Advanced	Authors	X		X
	Query Users	X		X
	Report Administrators	X		X
	Directory Administrators		X	X

Report Studio capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 37. Report Studio capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Authors	X		X
Report Administrators	X		X
Directory Administrators		X	X
Express Authors	X		X

The secured features in the following table are children of the Report Studio capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 38. Secured features of the Report Studio capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Bursting HTML Items in Report User Defined SQL	Authors	X		X
	Report Administrators	X		X
	Directory Administrators		X	X
Create/Delete	Authors	X		X
	Report Administrators	X		X
	Directory Administrators		X	X
	Express Authors	X		X
Allow External Data	Directory Administrators		X	X

Scheduling capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 39. Scheduling capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Report Administrators	X		X
Authors	X		X
Consumers	X		X
Query Users	X		X
Metrics Administrators	X		X
Metrics Authors	X		X
Controller Administrators	X		X
Controller Users	X		X
Analysis Users	X		X
Directory Administrators		X	X
Express Authors	X		X
PowerPlay Administrators	X		X
PowerPlay Users	X		X

The secured features in the following table are children of the Scheduling capability.

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 40. Secured features of the Scheduling capability and permissions for related groups and roles
Secured feature	Group or role	Execute	Set policy	Traverse
Schedule by day Schedule by hour Schedule by minute Schedule by month Schedule by trigger Schedule by week Schedule by year	Analysis Users	X		X
	Authors	X		X
	Consumers	X		X
	Controller Administrators	X		X
	Controller Users	X		X
	Directory Administrators		X	X
	Express Authors	X		X
	Metrics Administrators	X		X
	Metrics Authors	X		X
	Query Users	X		X
	Report Administrators	X		X
	PowerPlay Administrators	X		X
	PowerPlay Users	X		X
Scheduling Priority	Report Administrators	X		X
	Metrics Administrators	X		X
	Controller Administrators	X		X
	Directory Administrators		X	X
	PowerPlay Administrators	X		X

Self Service Package Wizard capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 41. Self Service Package Wizard capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X

Set Entry-Specific Capabilities capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 42. Set Entry-Specific Capabilities capability and permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Directory Administrators				X	X

Specification Execution capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 43. Specification Execution capability and initial permissions for related groups and roles
Group or role	Read	Write	Execute	Set policy	Traverse
Data Manager Authors			X		X
Directory Administrators				X	X

Watch Rules capability

In the following table, the letter X indicates that a permission is granted to a group or role for an object.

Table 44. Watch Rules capability and permissions for related groups and roles
Group or role	Execute	Set policy	Traverse
Report Administrators	X		X
Authors	X		X
Query Users	X		X
Consumers	X		X
Metrics Administrators	X		X
Metrics Authors	X		X
Controller Administrators	X		X
Controller Users	X		X
Analysis Users	X		X
Express Authors	X		X
Directory Administrators		X	X
PowerPlay Administrators	X		X
PowerPlay Users	X		X