Permissions Matrix
重要
If you are a new Alteryx customer as of spring 2025, you might be using an Alteryx Edition. The user roles and capabilities have changed. Visit Overview to learn more.
Alteryx Analytics Cloud (AAC) relies on Role-based Access Control (RBAC) to restrict user access to protected resources. AACAAC checks for specific permissions when determining access, and assigns those permissions to users through 1 or more roles.
重要
Only users with the Workspace Admin工作区管理员 or Account Admin账户管理员 roles can assign roles to other users.
注意
If a user has been assigned 1 or more roles for the same product across multiple workspaces, only 1 license will be assigned to that user.
Role Types
Application Roles
Creator创建者: Solves analytical use cases end-to-end and typically requires full permissions to applications. Assigning a user a Creator创建者 role requires a license.
Consumer使用者: Typically derives insights from assets created by other users. A Consumer使用者 has view and run permissions to applications. Assigning a user a Consumer使用者 role requires a license.
注意
Custom application roles aren't currently supported.
Administrative Roles
Account Admin账户管理员: Manages the account and administrative tasks. For example, they can control product access, track usage across the account, review past user behavior, and provision workspaces. An Account Admin账户管理员 role doesn't require a license.
Billing Admin账单管理员: Tracks ROI with access to account usage and billing details.. A Billing Admin账单管理员 role doesn't require a license.
Workspace Admin工作区管理员: Manages individual workspaces. They do administrative tasks like manage workspace access, configure integrations, and adjust security settings. A Workspace Admin工作区管理员 role doesn't require a license.
重要
Custom administrative roles aren't currently supported.
User Permissions
App Builder Roles
Permission | App Builder Consumer | App Builder Creator |
|---|---|---|
Datasets | read | create, read, update, delete, share |
Connectors | read | create, read, update, delete, share |
Plans | read, execute | create, read, update, delete, share, execute |
Designer Cloud Workflows | none | none |
Designer Cloud Flows | none | none |
Designer Desktop Macro | none | none |
Designer Desktop Workflows | none | none |
Designer Desktop Apps | none | none |
Auto Insights Data Layers | none | none |
Auto Insights Missions | none | none |
App Builder Apps | read, execute | create, read, update, delete, share, execute |
Location Intelligence Projects | none | none |
Machine Learning Projects | none | none |
Reports | none | none |
Auto Insights Roles
Permission | Auto Insights Consumer | Auto Insights Creator |
|---|---|---|
Datasets | read | create, read, update, delete, share |
Connectors | read | create, read, update, delete, share |
Plans | read, execute | create, read, update, delete, share, execute |
Designer Cloud Workflows | none | none |
Designer Cloud Flows | none | none |
Designer Desktop Macro | none | none |
Designer Desktop Workflows | none | none |
Designer Desktop Apps | none | none |
Auto Insights Data Layers | read, execute | create, read, update, delete, share, execute |
Auto Insights Missions | create, read, update, delete, share, execute | create, read, update, delete, share, execute |
App Builder Apps | none | none |
Location Intelligence Projects | none | none |
Machine Learning Projects | none | none |
Reports | none | none |
Designer Cloud Roles
Permission | Designer Cloud Consumer | Designer Cloud Creator |
|---|---|---|
Datasets | read | create, read, update, delete, share |
Connectors | read | create, read, update, delete, share |
Plans | read, execute | create, read, update, delete, share, execute |
Designer Cloud Workflows | read, execute | create, read, update, delete, share, execute |
Designer Cloud Flows | read, execute | create, read, update, delete, share, execute |
Designer Desktop Macro | none | none |
Designer Desktop Workflows | none | none |
Designer Desktop Apps | none | none |
Auto Insights Data Layers | none | none |
Auto Insights Missions | none | none |
App Builder Apps | none | none |
Location Intelligence Projects | none | none |
Machine Learning Projects | none | none |
Reports | none | none |
Cloud Execution for Desktop Roles
Permission | Cloud Execution for Desktop Consumer | Cloud Execution for Desktop Creator |
|---|---|---|
Datasets | read | create, read, update, delete, share |
Connectors | none | create, read, update, delete, share |
Plans | read, execute | create, read, update, delete, share, execute |
Designer Cloud Workflows | none | none |
Designer Cloud Flows | none | none |
Designer Desktop Macro | read, execute | create, read, update, delete, share, execute |
Designer Desktop Workflows | read, execute | read, execute |
Designer Desktop Apps | read, execute | read, execute |
Auto Insights Data Layers | none | none |
Auto Insights Missions | none | none |
App Builder Apps | none | none |
Location Intelligence Projects | none | none |
Machine Learning Projects | none | none |
Reports | none | none |
Location Intelligence and Machine Learning Roles
Permission | Location Intelligence Creator | Machine Learning Creator |
|---|---|---|
Datasets | create, read, update, delete, share | create, read, update, delete, share |
Connectors | create, read, update, delete, share | create, read, update, delete, share |
Plans | create, read, update, delete, share, execute | create, read, update, delete, share, execute |
Designer Cloud Workflows | none | none |
Designer Cloud Flows | none | none |
Designer Desktop Macro | none | none |
Designer Desktop Workflows | none | none |
Designer Desktop Apps | none | none |
Auto Insights Data Layers | none | none |
Auto Insights Missions | none | none |
App Builder Apps | none | none |
Location Intelligence Projects | create, read, update, delete, share, execute | none |
Machine Learning Projects | none | create, read, update, delete, share, execute |
Reports | none | none |
Admin Permissions
Account Admin Permissions
Permission Category | Description | Permissions |
|---|---|---|
Configurations | Private Data Handling, Workspaces, SSO, Security Settings, and Integrations | create, read, update, delete |
Users | Users, User Groups, Roles, and Auto-Provisioning | create, read, update, delete |
Logs | Audit Logs | read |
Usage | Products, Seats, and Usage | read |
Billing | Billing Overview and Payments | none |
Assets | Application and Platform Assets Created by Other Users | none |
Billing Admin Permissions
Permission Category | Description | Permissions |
|---|---|---|
Configurations | Private Data Handling, Workspaces, SSO, Security Settings, and Integrations | none |
Users | Users, User Groups, Roles, and Auto-Provisioning | none |
Usage | Products, Seats, and Usage | read |
Billing | Billing Overview and Payments | read |
Assets | Application and Platform Assets Created by Other Users | none |
Workspace Admin Permissions
Permission Category | Description | Permissions |
|---|---|---|
Configurations | Private Data Handling, Workspaces, SSO, Security Settings, and Integrations | create, read, update, delete |
Users | Users, User Groups, Roles, and Auto-Provisioning | create, read, update, delete |
Usage | Products, Seats, and Usage | none |
Billing | Billing Overview and Payments | none |
Assets | Application and Platform Assets Created by Other Users | read, delete, transfer* |
*The 'transfer' permission for Workspace Admins allows them to transfer ownership of assets created by other users within the workspace.
Editions and User Roles
For an introduction to Alteryx Editions, capabilities, user roles, and add-ons available as part of the Alteryx AI Platform for Enterprise Analytics, go to Overview.
Important
This content applies to new Alteryx Editions accounts launched in spring 2025. It doesn’t apply to accounts purchased earlier unless those accounts have migrated to one of the new editions.