Permissions Reference
Every permission a MetaMiner role can grant, the group it appears under in the role editor, and the tab or action it controls.
Permission names below match the Permissions tree in Security > Define Roles... in the MetaMiner Administrator. Permissions take effect only while MetaMiner Security is on; see User-Based Security.
How permissions apply
| Rule |
Detail |
| Per environment |
A user's role is set per environment, so a permission is granted or not in each environment separately |
| MetaMiner Client access |
Every role except No Access includes MetaMiner Client access. It is added automatically and not shown in the tree |
| Server-side checks |
The MetaMiner Server checks the permission for each protected request, so hiding a menu is not the only control |
| BusinessObjects rights still apply |
A MetaMiner permission allows the action in MetaMiner. The action runs as the environment's service account, or as the user when BusinessObjects user logon is REQUIRED, and BusinessObjects rights of that account still apply |
How tab permissions combine
The MetaMiner Client decides tab visibility from the environments you connect to in that session.
- Common tab permissions (Alerts, Backup/Promote, Meta Query, Visual Diff) must be granted in every connected environment. One environment without the permission hides the tab.
- SAP BO tab permissions (Servers, Security Diff, Impact Analysis DB, Report Validation) must be granted in every connected BusinessObjects environment.
Tip
If a user needs a tab for one environment only, have them connect to that environment alone, or grant the tab permission in every environment they use together.
Common
| Permission |
Controls |
| Tab: Alerts |
Shows the Alerts tab |
| Tab: Backup/Promote |
Shows the Backup/Promote tab |
| Tab: Meta Query |
Shows the Meta Query tab. Also allows sign-in to Meta Query on the web |
| Tab: Visual Diff |
Shows the Visual Diff tab |
| Delete Meta Query scripts from catalog |
Deletes Meta Query scripts from the script catalog on the MetaMiner Server |
SAP BO: tabs and analysis
| Permission |
Controls |
| Tab: Servers |
Shows the Servers tab |
| Tab: Security Diff |
Shows the Security Diff tab |
| Tab: Impact Analysis DB |
Shows the database Impact Analysis tab |
| Tab: Report Validation |
Shows the Report Validation tab (also needs a license that includes report validation) |
| Explore Security |
Opens the security explorer for an object |
| View Audit History |
Shows the audit history and activities of an object |
| View User History |
Shows the audit history of a user |
| View versions |
Lists saved versions of documents and universes |
| View Extended Properties |
Shows extended BusinessObjects repository properties of an object |
| Query Audit DB |
Runs queries against the environment's audit database |
| Webi RTM |
Opens Web Intelligence real-time monitoring |
| View in Web Browser |
Opens a document in the default browser through the BI launch pad |
SAP BO: content changes
| Permission |
Controls |
| Paste |
Pastes copied or cut objects into this environment |
| Delete |
Deletes objects |
| Rename |
Renames objects |
| Add New Folder |
Creates folders |
| Reset object |
Recreates the object's metadata in MetaMiner |
| Modify Owner |
Changes the owner of objects |
| Modify Description |
Changes object descriptions. Also allows converting user names to upper or lower case |
| Modify Connection |
Changes connection details |
| Remap Universe |
Remaps Web Intelligence documents to another universe, and remaps universe connections |
| Modify Crystal Logon Info |
Changes database logon information of Crystal Reports |
| Modify File Destination |
Changes file destinations of schedules |
| Purge Report Data |
Purges saved data from documents |
| Modify Extended Properties |
Modifies, clears or removes extended repository properties |
| Restore version |
Restores a saved version of a document or universe |
| Change Access Level |
Changes access levels and rights on objects |
SAP BO: transfer and backup
| Permission |
Controls |
| Export |
Exports objects from this environment to another environment (source side of promotion) |
| Import |
Imports objects into this environment (target side of promotion and restore) |
| Save As File |
Saves objects as files |
| Save As BIAR Backup |
Saves objects as a BIAR backup |
SAP BO: scheduling and servers
| Permission |
Controls |
| Pause/Resume Schedule |
Pauses a recurring scheduled instance or resumes a paused one |
| Re-run Instance |
Re-runs an instance |
| Stop Start Enable Disable Server |
Stops, starts, enables or disables BusinessObjects servers |
| Kill Sessions |
Ends BusinessObjects user sessions |
| Change Server Configuration |
Edits BusinessObjects server configuration properties from the BO console on the web |
SAP BO: users and groups
| Permission |
Controls |
| Enable User |
Enables BusinessObjects users |
| Disable User |
Disables BusinessObjects users |
| Reset user password |
Resets BusinessObjects user passwords |
| Copy user preferences |
Copies preferences from one BusinessObjects user to others |
| Send Email |
Sends e-mail to BusinessObjects users |
| Add User to Group |
Adds users to groups |
| Remove User from Group |
Removes users from groups |
| Modify User Group Assignments |
Changes group assignments from the environment node of the Users tab |
| Import Users from Excel |
Creates or updates users from an Excel file |
| Change User License Type |
Changes a user between Named User and Concurrent User |
| Modify User Aliases |
Creates, deletes or modifies enterprise user aliases |
These permissions apply to the directory tools in the BO console on the web.
| Permission |
Controls |
| AD Tools: View |
Shows Windows AD sync findings, actions and audit for an environment |
| AD Tools: Plan and Run Repairs |
Plans, runs and cancels repairs; acknowledges findings |
| AD Tools: Approve Repairs |
Approves repairs planned by another user |
| AD Tools: Change Policy |
Turns directory tool writes, tiers and anchors on or off for an environment |
Tableau, Power BI and Snowflake permissions
These permissions appear in the role editor of every installation and apply only to environments of that platform.
| Group |
Permission |
| Tableau |
Tab: Tableau Finder, Tab: Workbook Validation, Tab: Tableau Schedules, Tableau Security, Add User to Site, Remove User from Site, Add User to Group, Remove User from Group, Create Project, Create Site, Modify Site, Create Group, Delete Group, Rename Group, Publish Workbook, Publish Datasource, Open in Default Browser, Tableau Remove Object Permissions, Flow Scheduler Admin |
| PowerBI |
View Activities, Open in Default Browser, View Security, Tenant Admin |
| Snowflake |
View Usage & Definitions, View Security |