Permissions Matrix

Alteryx Analytics Cloud (AAC) relies on Role-based Access Control (RBAC) to restrict user access to protected resources. AAC checks for specific permissions when determining access, and assigns those permissions to users through 1 or more roles.

Important

Only users with the Workspace Admin or Account Admin roles can assign roles to other users.

Note

If a user has been assigned 1 or more roles for the same product across multiple workspaces, only 1 license will be assigned to that user.

Role Types

Application Roles

Creator: Solves analytical use cases end-to-end and typically requires full permissions to applications. Assigning a user a Creator role requires a license.
Consumer: Typically derives insights from assets created by other users. A Consumer has view and run permissions to applications. Assigning a user a Consumer role requires a license.

Note

Custom application roles aren't currently supported.

Administrative Roles

Account Admin: Manages the account and administrative tasks. For example, they can control product access, track usage across the account, review past user behavior, and provision workspaces. An Account Admin role doesn't require a license.
Billing Admin: Tracks ROI with access to account usage and billing details.. A Billing Admin role doesn't require a license.
Workspace Admin: Manages individual workspaces. They do administrative tasks like manage workspace access, configure integrations, and adjust security settings. A Workspace Admin role doesn't require a license.

Important

Custom administrative roles aren't currently supported.

User Permissions

	Datasets	Connectors	Plans	Designer Cloud Workflows	Designer Cloud Flows	Designer Cloud Workloads	Designer Desktop Workflows	Designer Desktop Apps	Auto Insights Data Layers	Auto Insights Missions	App Builder Apps	Location Intelligence Projects	Machine Learning Projects	Reports
App Builder Consumer	`read`	`read`	`read, execute`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`read, execute`	`none`	`none`	`none`
App Builder Creator	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`create, read, update, delete, share, execute`	`none`	`none`	`none`
Auto Insights Consumer	`read`	`read`	`read, execute`	`none`	`none`	`none`	`none`	`none`	`read, execute`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`
Auto Insights Creator	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`	`none`	`create, read, update, delete, share, execute`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`
Default Role	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`
Designer Cloud Creator	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`create, read, update, delete, share, execute`	`create, read, update, delete, share, execute`	`read`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`
Designer Cloud Consumer	`read`	`read`	`read, execute`	`read, execute`	`read, execute`	`read`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`
Location Intelligence Creator	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`create, read, update, delete, share, execute`	`none`	`none`
Machine Learning Creator	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`create, read, update, delete, share, execute`	`none`
Report Creator	`create, read, update, delete, share`	`create, read, update, delete, share`	`create, read, update, delete, share, execute`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`none`	`create, read, update, delete, share, execute`

Admin Permissions

	Configurations Private Data Handling, Workspaces, SSO, Security Settings, and Integrations	Users Users, User Groups, Roles, and Auto-Provisioning	Logs Audit Logs	Usage Products, Seats, and Usage	Billing Billing Overview and Payments	Assets Application and Platform Assets Created by Other Users
Account Admin	`create, read, update, delete`	`create, read, update, delete`	`read`	`read`	`none`	`none`
Billing Admin	`none`	`none`	`none`	`read`	`read`	`none`
Workspace Admin	`create, read, update, delete`	`create, read, update, delete`	`none`	`none`	`none`	`read, delete, transfer*`

Configurations

Private Data Handling, Workspaces, SSO, Security Settings, and Integrations

Users

Users, User Groups, Roles, and Auto-Provisioning

Logs

Audit Logs

Usage

Products, Seats, and Usage

Billing

Billing Overview and Payments

Assets

Application and Platform Assets Created by Other Users

Account Admin

create, read, update, delete

read

none

Billing Admin

none

read

none

Workspace Admin

create, read, update, delete

none

read, delete, transfer*

In this section:

Permissions Matrix

Role Types

Application Roles

Administrative Roles

User Permissions

Admin Permissions

Search results