Standard Application Roles

SAP Analytics Cloud is delivered with several standard application roles.

Standard Roles

You can assign the standard application roles directly to end users or, if you have different business needs, you can use them as a template for defining new roles.

Role Description
System Owner Full Privileges

Includes all user privileges to allow unrestricted access to all areas of the application. Only one user in the system can be assigned to this role, and it must always be assigned to a user.

Admin Planning Administrator: Full Privileges

Includes all task authorizations available in SAP Analytics Cloud. Usually assigned to the system administrator to set up users and roles and to perform system transports.

Modeler Planning Modeler: Modeling Privileges

Includes all authorizations that are required to manage models and dimensions. Usually assigned to the user who creates and changes models and dimensions.

Planner Reporter Planner Reporter: Planning and Reporting Privileges

Includes all authorizations that are required to perform planning activities, such as revenue planning and automated discoveries. This role also grants authorizations for updating currency tables. Usually assigned to the user who does the planning and budgeting.

Viewer Planning Viewer: Read Privileges

Includes read-only privileges. Usually assigned to the user who is allowed only to read the data.

BI Admin Business Intelligence Administrator: Full Privileges

Includes all task authorizations excluding those related to planning. Usually assigned to the BI system administrator to set up users and roles.

BI Content Creator Business Intelligence Content Creator: Create and Update Privileges

Includes all authorizations that are required to manage models and dimensions not related to planning. Usually assigned to the user who creates and changes non-planning models and dimensions.

BI Content Viewer Business Intelligence Viewer: Read Privileges

Includes read-only privileges for non-planning data. Usually assigned to the user who is allowed only to read the data. By default, this role does not include private files permissions.

SAPCP Content Creator SAP Cloud Platform Creator: Create and Update Privileges

Includes all authorizations that are required to manage models and dimensions not related to planning. Usually assigned to the user who creates and changes non-planning models and dimensions.

Note

The SAPCP roles allow access only to SAP Cloud Platform (SAPCP) as a data source.

SAPCP Content Viewer SAP Cloud Platform Viewer: Read Privileges

Includes read-only privileges for non-planning data. Usually assigned to the user who is allowed only to read the data. By default, this role does not include private files permissions.

Note

The SAPCP roles allow access only to SAP Cloud Platform (SAPCP) as a data source.

Predictive Analyst Predictive Analyst: Automated Discoveries Privileges

Includes all authorizations that are required to manage models and dimensions not related to planning. Usually assigned to the user who creates and changes non-planning models and dimensions. Also allows user access to smart machine discovery workflows.

Boardroom Viewer Includes the read-only privilege for the Digital Boardroom area. Usually assigned to the user who is allowed only to view boardroom agendas.
Boardroom Creator Includes all authorizations to create, edit, share, delete, and view boardroom agendas in the Digital Boardroom area.

SAP Analytics Hub Roles

You can assign the following SAP Analytics Cloud roles directly to SAP Analytics Hub end users or, if you have different business needs, you can use them as a template for defining new roles.

Role Description
SAP Analytics Hub Administrator Includes full assets and structure privileges. Usually assigned to the user who sets up the SAP Analytics Hub application. In addition, this user can perform all content management actions.
SAP Analytics Hub Content Creator Includes all authorizations to read, create, update, delete, hide, validate, and reject assets in SAP Analytics Hub. Usually assigned to the user who creates and modifies assets.

Note

We recommend that you use the SAP Analytics Hub Content Creator role as a template to define two more specific roles for the content management. For more information about this recommendation, see Creating SAP Analytics Hub Specific Roles.

SAP Analytics Hub Content Viewer Includes read-only privileges. Usually assigned to the user who is allowed only to read the assets.