Skip to main content

Permissions Matrix

Alteryx Analytics Cloud (AAC) relies on Role-based Access Control (RBAC) to restrict user access to protected resources. AAC checks for specific permissions when determining access, and assigns those permissions to users through 1 or more roles.

Important

Only users with the Workspace Admin or Account Admin roles can assign roles to other users.

Note

If a user has been assigned 1 or more roles for the same product across multiple workspaces, only 1 license will be assigned to that user.

Role Types

Application Roles

  • Creator: Solves analytical use cases end-to-end and typically requires full permissions to applications. Assigning a user a Creator role requires a license.

  • Consumer: Typically derives insights from assets created by other users. A Consumer has view and run permissions to applications. Assigning a user a Consumer role requires a license.

Note

Custom application roles aren't currently supported.

Administrative Roles

  • Account Admin: Manages the account and administrative tasks. For example, they can control product access, track usage across the account, review past user behavior, and provision workspaces. An Account Admin role doesn't require a license.

  • Billing Admin: Tracks ROI with access to account usage and billing details.. A Billing Admin role doesn't require a license.

  • Workspace Admin: Manages individual workspaces. They do administrative tasks like manage workspace access, configure integrations, and adjust security settings. A Workspace Admin role doesn't require a license.

Important

Custom administrative roles aren't currently supported.

User Permissions

Datasets

Connectors

Plans

Designer Cloud Workflows

Designer Cloud Flows

Designer Cloud Workloads

Designer Desktop Workflows

Designer Desktop Apps

Auto Insights Data Layers

Auto Insights Missions

App Builder Apps

Location Intelligence Projects

Machine Learning Projects

Reports

App Builder Consumer

read

read

read, execute

none

none

none

none

none

none

none

read, execute

none

none

none

App Builder Creator

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

none

none

none

none

none

none

none

create, read, update, delete, share, execute

none

none

none

Auto Insights Consumer

read

read

read, execute

none

none

none

none

none

read, execute

create, read, update, delete, share, execute

none

none

none

none

Auto Insights Creator

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

none

none

none

none

none

create, read, update, delete, share, execute

create, read, update, delete, share, execute

none

none

none

none

Default Role

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

none

none

none

none

none

none

none

none

none

none

none

Designer Cloud Creator

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

create, read, update, delete, share, execute

create, read, update, delete, share, execute

read

none

none

none

none

none

none

none

none

Designer Cloud Consumer

read

read

read, execute

read, execute

read, execute

read

none

none

none

none

none

none

none

none

Location Intelligence Creator

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

none

none

none

none

none

none

none

none

create, read, update, delete, share, execute

none

none

Machine Learning Creator

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

none

none

none

none

none

none

none

none

none

create, read, update, delete, share, execute

none

Report Creator

create, read, update, delete, share

create, read, update, delete, share

create, read, update, delete, share, execute

none

none

none

none

none

none

none

none

none

none

create, read, update, delete, share, execute

Admin Permissions

Configurations 

Private Data Handling, Workspaces, SSO, Security Settings, and Integrations

Users 

Users, User Groups, Roles, and Auto-Provisioning

Logs 

Audit Logs

Usage 

Products, Seats, and Usage

Billing 

Billing Overview and Payments

Assets 

Application and Platform Assets Created by Other Users

Account Admin 

create, read, update, delete

create, read, update, delete

read

read

none

none

Billing Admin 

none

none

none

read

read

none

Workspace Admin 

create, read, update, delete

create, read, update, delete

none

none

none

read, delete, transfer*