At the organization level in Lucanet xP&A, there are four user roles with different types of permissions:
Administrators: Administrators can:
Create, edit, and share models.
Add and remove people to and from the organization
Create teams, e.g. Finance Team or Marketing Team.
Editors: Editors can:
Create, edit, and share models
Create proposals and accept proposals on the model
Data collectors: Data collectors can propose edits to models with some other actions allowed. They can:
Write comments
Annotate charts
Propose changes to variables and dimension items
Propose to add, rename, delete or link dimension items
Open and use views shared with them
Act as the assigned reviewer of another user's proposal, approve or reject proposed changes and finish the review, provided they have the required proposal access. Applying changes remains an editor action.
But they cannot:
Add, delete, or update visuals, variables, groups, and sections
Add, delete, or update models, folders, or data sources
Create, save, or share their own views
Viewers:
Can view dashboards shared with the organization but cannot access underlying models to make changes.
Can create their own models, but cannot share models with the organization.
Administrators, editors, and data collectors can be assigned as the reviewer of a proposal. The reviewer assignment applies per proposal and does not grant model permissions. For details on who can be selected as a reviewer and on the review workflow, see Proposing and Approving Changes to a Model.
The user roles are assigned in the Administration section of the Lucanet CFO Solution Platform (see User Management).
In Lucanet xP&A, the user role and the level of access are two separate things: the user role is assigned in the Administration and defines what a user can do in general. The level of access is granted when a model or view is shared and defines what the user can do in this model or view. Both together determine the permissions of a user.
For example, users who only enter data on the dashboard need the Can input via dashboard level of access. If an editable table allows it, they can also create, rename, duplicate, and delete the items of its dimension:
Users with the user role Editor make these changes directly.
Users with the user role Data collector continue to suggest changes through change proposals that need approval.
Users with the user role Viewer cannot be granted the Can input via dashboard level of access.