KB36573: Privileges needed to use the User Manager in MicroStrategy Web 9.0.x

Strategy Web 9.0.0 and higher contains an Intelligence Server Administration page, with a User Manager interface to create and edit users and groups. The URL to access this page is:
 

http://localhost/MicroStrategy/asp/SrvrAdmin.aspx
http://localhost:8080/MicroStrategy/servlet/mstrServerAdmin

1. Enable Intelligence Server administrator from Web - This privilege allows access to the Intelligence Server Administration page, which houses the User Manager and Security Role Manager.

​

1. Create and edit users and groups - This privilege grants access to the User Manager and allows creation of new users or groups but will not allow to edit existing users. Note: This privilege cannot be given without Create configuration objects.

​

 
Note: In order to allow editing of existing users, either grant the Bypass all object security access checks privilege or give the user full control to the user objects.Granting the Bypass all object security access checks privilege will allow users to circumvent any Access Control List (ACL) restrictions to all objects within the project.
 

1. Enable user - This privilege allows enabling and disabling users by activating the checkbox 'Account Disabled'.

1. Reset Password - This privilege allows reseting the password for a user by enabling the password fields.

​

1. Configure Group Membership - This privilege enables the Groups tab.

​

1. Link users and groups to external accounts - This privilege enables the Authentication tab.

​

1. Create and edit security roles - This privilege grants access to the Security Role Manager.

​

1. Grant/Revoke privilege - This privilege enables the Project Access tab and allows individual granting of privileges but will not allow the user to make security role change

​

1. Assign security roles - This privilege also enables the Project Access tab and allows the modification of security roles within the Project Access tab but will not allow individual granting of privileges by itself.

​

1. Assign security filters - This privilege enables the Security Filters tab.

​

1. Create and edit contacts and addresses - This privilege enables the Addresses tab.

​

1. Configure contacts data security profile - This privilege enables the Contacts tab.

​