Web Reporter privileges
Privilege | Allows the user to... | Privilege in Command Manager |
** Web execute document | browse and execute Report Services documents | WEBEXECUTEDOCUMENT |
Web change user preferences | change some characteristics of page appearance and report results | WEBCHANGEUSEROPTIONS |
Web change view mode | toggle between grid, graph, and grid & graph, to hide or show predefined totals, and to reset reports | WEBCHANGEVIEWMODE |
Web configure toolbars | use, show, and hide toolbars | WEBCONFIGURETOOLBARS |
Web drill and link | use Links to access related data not shown in the original report results | WEBNORMALDRILLING |
Web export | export report results | WEBEXPORT |
Web object search | search for reports, documents, folders, filters, or templates | WEBOBJECTSEARCH |
Web print mode | display a printable version of a report or document | WEBPRINTMODE |
Web re-execute report against warehouse | re-execute a report, hitting the warehouse rather than the server cache. If Intelligence Server caching is turned off and this is not granted, the re-execute button is removed. | WEBREEXECUTEREPORTAGAINSTWH |
Web simultaneous execution | open multiple MicroStrategy Web sessions | WEBSIMULTANEOUSEXEC |
Web sort | sort report data by clicking on sort icons in column headings | WEBSORT |
Web subscribe to history list | subscribe to periodic execution of reports and view their results via the History List (Note: A user with this privilege is also considered to have the Schedule Request privilege in Common Privileges.) | WEBSCHEDULEREPORT |
Web switch page-by elements | switch page-by elements for objects in the Page axis | WEBSWITCHPAGEBY |
Web use locked headers | use the Lock Grid Headers feature | WEBUSELOCKEDHEADERS |
Web user | connect to MicroStrategy using the Web interface (Note: If a user does not have this privilege for a project, that project is not shown in Web. If a user does not have this privilege for any projects available on the Web server, Web returns an error message stating that “no projects are available for this project source.“) | WEBUSER |
Web view History List | view the History List, to access, sort, or remove reports and documents from the History List, and to refresh or clear the History List | WEBVIEWHISTORYLIST |
Web Analyst privileges
Privilege | Allows the user to... | Privilege in Command Manager |
* Web add/remove units to/from grid in document in View mode | add units to or remove units from an existing grid report in a Report Services document when in View mode | WEBMODIFYGRIDLEVELINDOC |
* Web create derived metrics | create new calculations based on other metrics already on a base report | WEBCREATEDERIVEDMETRICS |
* Web define derived elements | create derived elements in a report or document | WEBDEFINEDERIVEDELEMENTS |
* Web number formatting | change number formatting on all metrics on grids | WEBNUMBERFORMATTING |
* Web use report objects window | use the Report Objects panel | WEBUSEREPORTOBJECTSWINDOW |
* Web use view filter editor | add or modify the View filter for a report | WEBUSEVIEWFILTEREDITOR |
*** Web create alert | create a conditional subscription based on a threshold | WEBCREATEALERT |
*** Web subscribe to Bulk Export | create a bulk export subscription | WEBEXECUTEBULKEXPORT |
Web add to history list | add reports or documents to the History List (requires Web simultaneous execution privilege) | WEBADDTOHISTORYLIST |
Web advanced drilling | access advanced drill mode through the More Options link on the report results page | WEBADVANCEDDRILLING |
Web alias objects | rename an object on a report | WEBALIASOBJECTS |
Web choose attribute form display | use the Attribute Forms dialog, see attribute forms in the Report Objects list, see the Attribute Forms context menu options, and pivot attribute forms | WEBCHOOSEATTRFORMDISPLAY |
Web create new report | access the Create Report folder and design reports, and to run new reports from the folder where he or she has saved the report definition | WEBCREATENEWREPORT |
Web drill on metrics | drill on metrics | WEBDRILLONMETRICS |
Web edit notes | add and edit notes that have been added to a report or document | WEBEDITNOTES |
Web execute data mart reports | execute data mart reports | WEBEXECDATAMARTREPORTS |
Web filter on selections | filter on selected data | WEBFILTERSELECTIONS |
Web manage objects | delete folders, reports, and documents | WEBMANAGEOBJECTS |
Web modify Subtotals | add, modify or delete subtotals on a Web report | WEBMODIFYSUBTOTALS |
Web pivot report | move rows and columns up or down and left or right, to pivot from rows to columns and vice versa, and to move metrics, attributes, custom groups, and consolidations to the Page axis | WEBPIVOTREPORT |
Web report details | access report and document information by clicking the Report details link on the report, History List, or Wait page | WEBREPORTDETAILS |
Web report SQL | view the SQL code for the report | WEBREPORTSQL |
Web save to My Reports | save reports and documents to My Reports folder | WEBSAVEREPORT |
Web save to Shared Reports | save reports and documents to the Shared Reports folder | WEBSAVESHAREDREPORT |
Web simple graph formatting | control all of the functionality found on the first tab of the graph formatting editor as well as graph formatting toolbar | WEBSIMPLEGRAPHFORMATTING |
Web use basic threshold editor | use the Basic Threshold Editor | WEBUSEBASICTHRESHOLDEDITOR |
Web Professional privileges
Privilege | Allows the user to... | Privilege in Command Manager |
* Web define Intelligent Cube report | create a report that uses an Intelligent Cube as a data source | WEBDEFINEVIEWREPORT |
* Web publish Intelligent Cube | publish an Intelligent Cube to Intelligence Server | WEBEXECUTECUBEREPORT |
* Web save derived elements | save stand-alone derived elements, separate from the report | WEBSAVEDERIVEDMETRICS |
** Web create HTML container | create HTML container objects in a document | WEBCREATEHTMLCONTAINER |
** Web document design | create a document page, access design mode for documents, and perform WYSIWYG editing of documents in view mode (Note: This privilege is required to define conditional formatting.) | WEBDOCDESIGN |
** Web manage document datasets | add datasets to and remove datasets from a Report Services document (Note: User must have Web document design privilege as well.) | WEBMANAGEDOCDATASETS |
Web define advanced report options | set the available and default Run and Export modes for a report | WEBDEFINEADVANCEDREPORTOPTIONS |
Web define MDX cube report | define a new report that accesses an MDX cube, and see the MDX Cube option in the Create Report dialog box. | WEBDEFINEOLAPCUBEREP |
Web edit drilling and links | use the Link Editor | WEBEDITREPORTLINKS |
Web format grid and graph | change the formats of grid and graph reports. In a grid report, the Format grid field is displayed; in a graph report, the Graph type and Graph sub-type fields are displayed. | WEBFORMATGRIDANDGRAPH |
Web modify the list of report objects (use object browser -- all objects) | use the Object Browser when viewing a report in view or design mode. This determines whether the user is a report designer or a report creator. A report designer is a user who can build new reports based on any object in the project. A report creator can work only within the parameters of a pre-designed report that has been set up by a report designer. | WEBMODIFYREPORTLIST |
Web save templates and filters | save templates and filters | WEBSAVETEMPLATEFILTER |
Web set column widths | modify the column widths and row height for a grid report | WEBSETCOLUMNWIDTHS |
Web subscribe others | view all available addresses, and add other MicroStrategy users to a report or document subscription | SUBSCRIBEOTHERS |
Web use advanced threshold editor | use the Advanced Threshold Editor | WEBUSEADVANCEDTHRESHOLDEDITOR |
Web use design mode | modify the report using design mode | WEBUSEDESIGNMODE |
Web use filter editor | add or modify the report filter for a report | WEBUSEREPORTFILTEREDITOR |
Web use prompt editor | use the prompt editor, and create or modify prompts | WEBUSEPROMPTEDITOR |
Web MMT Option privilege
Privilege | Allows the user to... | Privilege in Command Manager |
Web enable MMT access | access the eTrainer link | WEBENABLEMMTACCESS |
Common privileges
Privilege | Allows the user to... | Privilege in Command Manager |
* Drill within Intelligent Cube | drill within an Intelligent Cube, so no SQL is executed. A user who has this privilege and executes a drill that can be resolved through OLAP Services does not generate and execute SQL against the warehouse. | DRILLWITHINTELLIGENTCUBE |
Add notes | add notes to a report or document | ADDNOTES |
Create application objects | create application objects (Note: The appropriate editor privileges listed for Desktop privileges are also required.) | CREATEAPPOBJECTS |
Create new folder | create new folders | CREATENEWFOLDER |
Create schema objects | create schema objects | CREATESCHEMAOBJECTS |
Create shortcut | create shortcuts to objects | CREATESHORTCUT |
Edit notes | edit an existing note in a report or document | EDITNOTES |
Export to Excel | export a report or document to a Microsoft Excel spreadsheet | EXPORTTOEXCEL |
Export to flash | export a report or document to a MacroMedia Flash presentation | EXPORTTOFLASH |
Export to HTML | export a report or document to HTML | EXPORTTOHTML |
Export to PDF | export a report or document to a PDF document | EXPORTTOPDF |
Export to text | export a report or document to plain text | EXPORTTOTEXT |
Save personal prompt anwser | save personalized answers to prompts | SAVEPERSONALPROMPTANSWERS |
Schedule request | schedule a report | SCHEDULEREQUEST |
Use server cache | use the caches on the Intelligence Server | USESERVERCACHE |
Use translation editor | use the Translation editor | USETRANSLATIONEDITOR |
View notes | view notes that have been added to a report or document | VIEWNOTES |
MicroStrategy Office privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Use office | make requests and execute reports through the MicroStrategy Office interface | USEOFFICE |
MicroStrategy Mobile privileges
Privilege | Allows the user to... | Privilege in Command Manager |
** Mobile View Document | view Report Services Documents in the MicroStrategy Mobile client, and create Mobile document subscriptions in MicroStrategy Web | MOBILEVIEWDOCUMENT |
Use MicroStrategy Mobile | view reports in the MicroStrategy Mobile client | USEMOBILE |
Distribution Services privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Configure contacts data security profile | link and unlink a contact to a user | CONFIGCONTACTDATAPROFILE |
Create and edit transmitters and devices | Use the Transmitter Editor and Device Editor | USETRANSMITTERDEVICE |
Create email address | Create new email addresses for subscriptions | WEBCREATEEMAILADDRESS |
Create file location | create new file locations for subscriptions | WEBCREATEFILELOCATION |
Create print location | create new printer locations for subscriptions | WEBCREATEPRINTLOCATION |
Subscribe to Email | create an email subscription | WEBSCHEDULEEMAIL |
Subscribe to file | create a file subscription | WEBSCHEDULEDEXPORTTOFILE |
Subscribe to print | create a print subscription | WEBSCHEDULEDPRINTING |
Use distribution services | receive email, file, and print subscriptions | USEDISTRIBUTIONSERVICES |
Use link to history list in email | receive an email subscription with a link to a History List, and use the Data And Link To History List and Link To History List options when creating an email subscription | SENDLINK |
Use send now and send a preview now | preview and send subscriptions immediately | USEIMMEDIATEDELIVERY |
Multisource Option privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Execute multiple source report | execute a report that uses a DBInstance other than the project’s primary DBInstance | EXECUTEMULTISOURCEREPORT |
Import table from multiple sources | import a table from a DBInstance other than the project’s primary DBInstance | IMPORTTABLEFROMMULTIPLESOURCES |
Desktop Analyst privileges
Privilege | Allows the user to... | Privilege in Command Manager |
* Create derived metrics | create calculations using metrics on a report | CREATEDERIVEDMETRICS |
* Define derived elements | create derived elements in a report or document | DEFINEDERIVEDELEMENTS |
* Use report objects window | view and use the Report Objects window | USEREPORTOBJECTSWINDOW |
* Use view filter editor | use the View filter editor | USEVIEWFILTEREDITOR |
** Execute document | execute Report Services documents | EXECUTEDOCUMENT |
Alias objects | rename objects | ALIASOBJECTS |
Change user preferences | set his or her preferences | CHANGEUSERPREFERENCES |
Choose attribute form display | set attribute forms | CHOOSEATTRIBUTEDISPLAY |
Configure toolbars | show/hide toolbars in the Report Editor | CONFIGURETOOLBARS |
Drill and link | use Links to access related data not shown in the original report results | DRILLANDLINK |
Modify report subtotals | change or create subtotals on a report | MODIFYSUBTOTALS |
Modify sorting | change a report’s sorting | MODIFYSORTING |
Pivot report | pivot information on a report | PIVOTREPORT |
Re-execute report against warehouse | re-execute a report, hitting the warehouse rather than the server cache. If Intelligence Server caching is turned off and this is not granted, the re-execute button is removed. | REEXECUTEREPORTAGAINSTWH |
Save custom AutoStyle | save a report’s style as a custom autostyle | SAVECUSTOMAUTOSTYLE |
Send to email | use the Send to e-mail option in the Report editor | SENDTOEMAIL |
Use data explorer | use the data explorer in the object browser | USEDATAEXPLORER |
Use Desktop | log in to a project using Desktop. (Note: If a user does not have this privilege for a project, that project is not shown in Desktop. If a user does not have this privilege for any projects available in the project source, Desktop returns an error message stating that “no projects are available for this project source.“) | USEDESKTOP |
Use grid options | use the Grid Options dialog box | USEGRIDOPTIONS |
Use history list | use the History List | USEHISTORYLIST |
Use report data options | use the Report Data Options feature | USEREPORTDATAOPTIONS |
Use report editor | access the “New” option in the Report Editor, and create new reports (Note: If a user has this privilege but not the Use design view privilege (in Desktop Designer privileges), she can still create new reports from templates, but the “Blank report” option is not available.) | USEREPORTEDITOR |
Use search editor | use the search feature on all editors and Desktop | USESEARCHEDITOR |
Use thresholds editor | use the Thresholds editor (Note: This privilege is required to define conditional formatting.) | USETHRESHOLDSEDITOR |
View SQL | view a report’s SQL | VIEWSQL |
Desktop Designer privileges
Privilege | Allows the user to... | Privilege in Command Manager |
* Define Intelligent Cube report | create a report that uses an Intelligent Cube as a data source | DEFINEVIEWREPORT |
* Publish Intelligent Cube | publish an Intelligent Cube to Intelligence Server | EXECUTECUBEREPORT |
* Save derived elements | save stand-alone derived elements, separate from the report | SAVEDERIVEDELEMENTS |
* Use Intelligent Cube Editor | create Intelligent Cubes | USECUBEREPORTEDITOR |
** Create HTML container | create HTML container objects in a document | CREATEHTMLCONTAINER |
** Use document editor | use the Report Services Document Editor | USEDOCUMENTEDITOR |
*** Use bulk export editor | use the Bulk Export Editor to define a bulk export report | USEBULKEXPORTEDITOR |
Define freeform SQL report | define a new report using Freeform SQL, and see the Freeform SQL icon in the Create Report dialog box. | DEFINEFREEFORMSQLREPORT |
Define MDX cube report | define a new report that accesses an MDX cube. | DEFINEOLAPCUBEREPORT |
Define query builder report | define a new Query Builder report that accesses an external data source, and see the Query Builder icon in the Create Report dialog box. | DEFINEQUERYBUILDERREP |
Format graph | modify a graph’s format using a toolbar or gallery | FORMATGRAPH |
Modify the list of report objects (use object browser) | add objects to a report, which are not currently displayed in the Report Objects window. This determines whether the user is a report designer or a report creator. A report designer is a user who can build new reports based on any object in the project. A report creator can work only within the parameters of a pre-designed report that has been set up by a report designer. This privilege is required to edit the report filter and the report limit. For more information on these features, see the Advanced Reporting Guide. | MODIFYREPORTOBJECTLIST |
Use consolidation editor | use the Consolidation Editor | USECONSOLIDATIONEDITOR |
Use custom group editor | use the Custom Group Editor | USECUSTOMGROUPEDITOR |
Use data mart editor | use the Data Mart Editor | USEDATAMARTEDITOR |
Use design mode | use Design view in the Report Editor | USEDESIGNMODE |
Use drill map editor | create or modify drill maps | USEDRILLMAPEDITOR |
Use filter editor | use the Filter Editor | USEREPORTFILTEREDITOR |
Use find and replace dialog | use the Find and Replace dialog box | USEFINDANDREPLACEDIALOG |
Use formatting editor | use the formatting editor for consolidations, custom groups, and reports | USEFORMATTINGEDITOR |
Use HTML document editor | use HTML Document Editor | USEHTMLDOCUMENTEDITOR |
Use Link Editor | use the Link Editor | EDITREPORTLINKS |
Use metric editor | use the Metric Editor. Among other tasks, this privilege allows the user to import DMX (Data Mining Services) predictive metrics. | USEMETRICEDITOR |
Use project documentation | use the project documentation feature to print object definitions | USEPROJECTDOCUMENTATION |
Use prompt editor | use the Prompt Editor | USEPROMPTEDITOR |
Use subtotal editor | use the Subtotal Editor | USESUBTOTALSEDITOR |
Use template editor | use the Template Editor | USETEMPLATEEDITOR |
Use VLDB property editor | use the VLDB Properties Editor | USEVLDBEDITOR |
View ETL information | This privilege is deprecated. | VIEWETLINFO |
Architect privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Bypass schema objects security access checks | modify schema objects. For example, users with this can update the schema or use the Warehouse Catalog Browser without having administration privileges. | BYPASSSCHEMAACCESSCHECKS |
Import function | use the function plug-in editor | IMPORTFUNCTION |
Import MDX cube | import an MDX cube. | IMPORTOLAPCUBE |
Use Architect editors | use the editors within Architect (for example, the Attribute, Fact, Hierarchy, and Table editors) (Note: This privilege is required to work with logical views.) | USEARCHITECTEDITORS |
Object Manager privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Use Object Manager | use Object Manager to manage objects through your application’s life cycle. (Note: A user cannot log into a project source unless he has this privilege on at least one project within that project source. Additionally, a user cannot open a project unless he has this privilege on that project.) | USEOBJECTMANAGER |
Use Repository Translation Wizard | use Repository Translation Wizard to translate objects | USETRANSLATIONTOOL |
Command Manager privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Use Command Manager | use Command Manager to run and manage scriptsPrivilege | USECOMMANDMANAGER |
Integrity Manager privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Use Integrity Manager | use Integrity Manager to test reports in a project | USEINTEGRITYMANAGER |
Administration privileges
Privilege | Allows the user to... | Privilege in Command Manager |
Administer Caches | have full control over report, document, element, and object caches in a project | ADMINISTERCACHES |
Administer cluster | add or remove nodes in a cluster, and set the default cluster membership | CLUSTERADMINISTRATION |
Administer Cubes | publish, unpublish, delete, and refresh Intelligent Cubes | ADMINISTERCUBES |
Administer Database Connections | close database connections | ADMINISTERDBCONNECTIONS |
Administer History Lists | delete other users’ History List messages (Note: This functionality is only available for database-based history lists, not for file-based history lists.) | ADMINISTERHISTORYLISTS |
Administer Jobs | kill jobs from other users | ADMINISTERJOBS |
Administer Subscriptions | create, edit, and delete subscriptions, and schedule administrative tasks | SCHEDULEADMIN |
Administer User Connections | close user connections opened by other users | ADMINISTERUSERCONNECTIONS |
Assign security filters | grant or revoke a security filter to another user for a project | USESECURITYFILTERMANAGER |
Assign security roles | grant or revoke a security role to another user for a project | ASSIGNSECURITYROLES |
Audit change journal | view the change journal entries | MONITORCHANGEJOURNAL |
Bypass all object security access checks | have full control over all objects regardless of the object access permissions granted to the user, and grant or revoke the Bypass All Object Security Access Checks privilege to other users. (Note: This privilege is inherently granted for use of Object Manager, Project Duplicator, and Project Mover, if you have the appropriate privileges to use those tools.) | ADMINBYPASSALLCHECKS |
Configure caches | view and set the report, document, element, and object caching properties | CONFIGCACHES |
Configure change journaling |
| CONFIGAUDITING |
Configure connection map | view, set, and refresh the connection map for a project | CONFIGCONNECTIONMAP |
Configure governing | project level: view and set project governing settings | CONFIGGOVERNING |
Configure group membership | add or remove users to a user group (Note: this also requires the Create And Edit Users And Groups privilege) | CONFIGGROUPMEMBERS |
Configure history lists | view and set the History List properties | CONFIGHISTORYLIST |
Configure language settings | use the User Language Preferences Manager | CONFIGLANGUAGE |
Configure project basic | view and change project settings, and use MDUpdate utility | CONFIGPROJECTBASIC |
Configure project data source | view and change the project’s primary data source, and add and remove database instances for use in data marts, Freeform SQL, Query Builder, and MDX | CONFIGPROJECTDATASOURCE |
Configure security settings | view and change server-level security settings | CONFIGSECURITY |
Configure server basic | create, view, and change the server definition | CONFIGSERVERBASIC |
Configure statistics | view and change the statistics configuration | CONFIGSTATS |
Configure subscription settings | set up email notifications for successful subscriptions | CONFIGSUBSCRIPTIONSETTINGS |
Create and edit contacts and addresses | create and modify contacts and addresses | USECONTACTMANAGER |
Create and edit database instances and connections | create and modify database instances and database connections, and set the number of database threads for each database instance and the prioritization map of each database instance | USEDBINSTANCEMANAGER |
Create and edit database logins | create and modify database logins | USEDBLOGINMANAGER |
Create and edit schedules and events | create and modify schedules and events | USESCHEDULEMANAGER |
Create and edit security filters | create and modify security filters | DEFINESECURITYFILTER |
Create and edit security roles | create and modify security roles | USESECURITYROLEMANAGER |
Create and edit users and groups | create and modify users and user groups (Note: To enable or disable users you must have the Enable User privilege. To grant or revoke privileges you must have the Grant/Revoke Privilege privilege.) | USEUSERMANAGER |
Create configuration objects | create configuration objects (Note: This privilege is inherently granted for use of Object Manager if you have the Use Object Manager privilege) | CREATECONFIGOBJECT |
Duplicate project | use the Project Duplication Wizard to duplicate a project | DUPLICATEPROJECT |
Edit project status | use the Project Status Editor | USEPROJECTSTATUSEDITOR |
Enable Intelligence Server administration from Web | in Web, access the Intelligence Server Administration page | ENABLEADMINISTRATIONFROMWEB |
Enable user | enable or disable users (Note: when this privilege is granted, the Create And Edit Users And Groups privilege is automatically granted as well.) | ENABLEUSER |
Fire events | trigger events | FIREEVENT |
Grant/Revoke privilege | grant and revoke privileges to users (Note: To grant or revoke the Bypass All Object Security Access Checks privilege to another user, you must have the Bypass All Object Security Access Checks privilege.) | GRANTPRIVILEGES |
Idle and Resume project | idle and resume projects | IDLEPROJECT |
Link users and groups to external accounts | link MicroStrategy users and groups to users and groups from sources such as Windows NT, LDAP, or a database | LINKTOEXTERNALACCOUNT |
Load and Unload project | load and unload projects, and configure which projects are loaded on which cluster nodes at startup | LOADPROJECTS |
Monitor caches | use the Cache Monitor; view information for all caches in a project | USECACHEMONITOR |
Monitor Cluster | use the Cluster view of the System Maintenance Monitor | USECLUSTERMONITOR |
Monitor Cubes | use the Intelligent Cube Monitor; view information for all Intelligent Cubes in a project | USECUBEMONITOR |
Monitor Database Connections | use the Database Connection Monitor; view information for all database connections in a project | USEDBCONNMONITOR |
Monitor History Lists | use the History List Monitor; view information for all history list messages in a project | HISTORYLISTMONITOR |
Monitor Jobs | use the Job Monitor; view information for all jobs in a project | USEJOBMONITOR |
Monitor Project | use the Project view of the System Maintenance Monitor | USEPROJECTMONITOR |
Monitor Subscriptions | use the Subscription Manager; view information for all subscriptions in a project (Note: Scheduled administrative tasks are only visible if the user has the privilege corresponding to the administrative task) | USESCHEDULEMONITOR |
Monitor User Connections | use the User Connection Monitor; view information for all user connections in a project | USEUSERCONNMONITOR |
Reset user password | change the passwords of other users | RESETUSERPASSWORDS |
Server performance counter monitoring | This privilege is deprecated. Server performance can be monitored through Enterprise Manager. | PERFCOUNTERMONITORING |
Web administration | access the MicroStrategy Web Administrator page and assign Project defaults | WEBADMIN |
