Workstation Privileges and Security Access

Vice President, AI Engineering • MicroStrategy

Starting with the release of Strategy ONE (March 2024), dossiers are also known as dashboards.
Privileges and Security Access in Workstation
Strategy has a rich security model that consists of three major components - privileges, security filters, and permissions.

Privileges are given on a per-user basis, some of which are also per-Application. These are meant to restrict the ability to perform certain privileged actions. For example, a user needs to be given the "Create Dataset in Workstation" privilege to be able to create new Datasets in that Application. Workstation will disable this action for users who do not have this privilege.
Security Filters can be configured so that users executing a particular query will only see certain data. For example, a security filter can be used to restrict a regional director to only visualize data from their region.
Permissions are used to either grant or deny the right to perform particular actions on an object. Strategy uses a common security paradigm, Access Control Lists, or ACLs, to determine if a user has the permission to execute a particular action.

This article will focus on Privileges and Permissions. In Workstation, Privileges and Permissions are used to enable or disable certain actions from being taken by the current User(s).
Privileges

Privileges can be granted or denied in Developer. The following table describes various actions in Workstation that are protected by Privileges. Some actions require multiple Privileges, and some may also be affected by Permissions.

Permissions

Access rights, also known as permissions, are the per-user rights that can be granted or denied for an object. An object's Access Control List keeps track of all of the access rights that have been granted or denied to particular Users.
Note: There exists a Bypass all object security access checks privilege. A user with this privilege will bypass all access checks on them. This privilege is granted inherently to the Administrator, and the Administrator is the only User that can grant or revoke this privilege.

Below is a table outlining each of the rights and their descriptions.

Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions

*In Workstation, if a user does not have Control right on an Object, then options to add, delete, or modify ACLs for that Object will be disabled. In addition, the Owner of an Object will always inherently have Control right for that Object.

Permissions can be managed in Workstation by right-clicking on the Object, selecting “Get Info”, and selecting the Security Access tab.

For convenience, Workstation provides commonly used default configurations for permissions. This is the name that displays in the Permissions column in the Security Access tab:

Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions
Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions	Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Advanced Settings tab.Right click an Object → Get Info (need Read permission on the Object). Users without this privilege will not see the Edit icon for Properties on Advanced Settings tab.NameDescriptionBrowseA User/User Group with this right should be informed about the existence of the target object when browsing a list of objects.ReadA User/User Group with this right should be able to examine the complete definition of the target object in metadata or in memory. ExecuteA User/User Group with this right should be permitted to execute queries built using the target object.UseA User/User Group with this right should be permitted to include references to the target object in the definition of other objects.ModifyA User/User Group with this right is permitted to modify the target object and save the modification to metadata.DeleteA User/User Group with this right is permitted to delete the target object from metadata.ControlA User/User Group with this right is permitted to modify the access control list of the target. Display NamePermissions Included*View Browse, Read, Use, and ExecuteModifyEverything in View, Write, and DeleteFull ControlAll PermissionsDenyNo Permissions

Permissions can also be individually viewed, granted and denied for custom configuration using the bottom bar. In the screenshot above, the Everyone row is selected, a User Group that has View access. The bottom bar thus shows the permissions granted: Browse, Read, Use, and Execute.

Advanced Options

In addition, when setting the ACLs for a folder in Workstation, administrators have the option to Apply to Enclosed Objects ("Cascade inheritable permissions to all child objects" in Windows). Selecting this checkbox means that the ACL settings for the folder currently being viewed will be applied to all of the children recursively. This means that all children, and children of children, etc., will have exactly the folder's ACL upon saving. In other words, the object's ACL will be overwritten and replaced with the current folder's ACL. This is different from the default behavior of Developer, which is to merge the existing ACLs of any children with the folder's ACL. If merge behavior is desired, it can be done through Developer.

HyperIntelligence and Security Access

HyperIntelligence Cards deliver instant, inline, context-aware and personalized intelligence to Strategy users. In Strategy 2019, the primary form of consumption of Cards will be through a Google Chrome extension. Workstation provides a central place to create and manage multiple cards. Users can leverage the existing ACL infrastructure through Workstation to share their cards with other Strategy users.

Cards differ from other Strategy objects in how the ACLs are determined upon creation. This is to enable the creator of the card to have explicit control over what Users and User Groups can consume the Cards. Unlike other Objects, Cards will follow these rules when setting ACLs:

No inheritance of ACLs from parent folder
Author user has Full Control
No other users should have any ACL defined for the card upon creation
Save as... option will replace the ACLs, giving the new author Full Control.

Comment

0 comments

Details

Knowledge Article

Published:

December 8, 2023

Last Updated:

March 21, 2024