Permissions in User Default and custom roles

Allowed: Space owners and users with the Can manage role can share individual applications with users or groups without adding them to the space.

Not allowed: Users can only share the entire space, not individual apps.

No data: Users can only download images and PDFs. Data downloads are not permitted.

Allowed: Users can download all types of app content.

Not allowed: App content downloads are not permitted.

Allowed: Users can use all GeoOperations functions.

No geocoding: Users can use all GeoOperations functions, except for Address to point lookup and Point to address lookup.

Not allowed: Users cannot use GeoOperations.

Allowed: Users have full access to write table functionality, including chart configuration, making changes in editable columns, and access to the change-stores API.

Read and write access only: Users can view and interact with write tables in apps. They can make changes in editable columns added to the write table. Users cannot create write table charts or edit existing write table chart configurations, and cannot use API keys to extract changes from the change-stores API.

Not allowed: Users cannot view or make changes in editable columns within write tables. They also cannot create write tables or edit existing write table configurations, and they are not granted access to the change-stores API.

For more information, see Setting permissions for write tables.

View assistants: Users can view assistants and ask questions.

Allowed: Users can create, view, and manage assistants.

Not allowed: Users cannot access assistants.

Allowed: Users have access to shared automations.

Not allowed: Users can only access personal automations if they are assigned the Automation creator role. Admins can set User Default to not allowed and create custom roles to provide access to shared automations to a group of users.

Allowed: Users can list, create, view, update, and delete data connections. Users can also read data from, and store data to, these connections.

Read: Users can view data connections, select and load data from connections, and store data to data connections.

Not allowed: Users cannot create, view, update, or delete data connections. Users also cannot read data from, or store data to, these connections.

For more information, see Assigning permissions for users to work with data connections.

Consume only: Users have access to the Data marketplace.

Allowed: Users can view, create, update, activate, and delete data products on the Data marketplace.

Not allowed: Users cannot access data products on the Data marketplace.

Apply only: Users can list and view validation rules (depending on their license), and apply rules on datasets.

Allowed: Users can view, create, update, and delete validation rules on a space.

Not allowed: Users cannot view validation rules.

Assign only: Users can list and view semantic types (depending on their license), and apply semantic types on datasets.

Allowed: Users can view, create, update, and delete semantic types. No space role is needed.

Not allowed: Users cannot view semantic types.

Allowed: Users can list, create, view, and delete glossaries. In glossaries, Users can read, create, edit, and remove terms. Users can verify terms.

Read and collaborate on terms only: Users can read, create, edit, and remove glossary terms.

Manage only: Users can list, create, view, and delete glossaries, but cannot change terms. In glossaries, Users can read, create, edit, and remove terms.

Not allowed: Users have no access to glossaries and their terms.

View knowledge bases: Users can view knowledge bases.

Allowed: Users can create, view, manage, index, and search knowledge bases.

Not allowed: Users cannot access knowledge bases in Qlik Cloud.

Allowed: Users can index knowledge bases and create a reindexing schedule.

Not allowed: Users cannot index knowledge bases.

Allowed: Users can search knowledge bases when asking questions of Qlik Answers assistants.

Not allowed: Users cannot search knowledge bases.

Allowed: Users can view lineage and impact analysis between assets.

Not allowed: Users cannot view lineage and impact analysis between assets.

Allowed: Users can view, create, update, and use links in the Analytics activity center. They can delete links that they created.

Not allowed: Users cannot view or work with links in the Analytics activity center.

For more information, see Who can create links.

Allowed: Users can view, manage, and delete, and run predictions with ML deployments. With sufficient permissions for the ML experiment, they can also deploy models to ML deployments. Additionally, users can view ML experiments.

Not allowed: Users cannot view, manage, delete, or run predictions with ML deployments. They also cannot deploy models to ML deployments.

Manage ML deployments

Allowed: Users can run predictions from ML deployments using the real-time predictions endpoint in the Machine Learning API or the Qlik Predict analytics connector.

Not allowed: Users cannot run predictions from ML deployments using the real-time predictions endpoint in the Machine Learning API or the Qlik Predict analytics connector.

Run ML API and connector predictions

Allowed: Users can view, create, manage, and delete ML experiments. They can also deploy models from experiments into ML deployments.

Not allowed: Users cannot view, create, manage, or delete ML experiments.

Manage ML experiments

Allowed: From any ML deployment they can access, users can activate and deactivate predictions for the source model.

Not allowed: From any ML deployment they can access, users cannot activate or deactivate predictions for the source model.

For more information about model approval by non-administrators, see Approving deployed models.

Allowed: Users can create, view, update, delete, and share notes in activity centers and apps.

Not allowed: Users cannot create, view, update, delete, or share notes in activity centers and apps.

Allowed: Users can generate AI-based validation rules for datasets, and descriptions for any resources.

Not allowed: Users cannot generate AI-based validation rules, descriptions or suggestions.

Read: Users can view the results of the data quality computation.

Allowed: Users can compute data quality and view the results.

Not allowed: Users cannot compute data quality.

Allowed: Users can configure the Qlik Trust Score™ dimensions at the tenant level, view the score and its history.

Not allowed: Users cannot configure, or view the Qlik Trust Score™.

Allowed: Users can create, view, update, and delete their own API keys in their personal settings.

Not allowed: Users cannot create or manage API keys.

Allowed: Users can access Insight Advisor in all forms within Qlik Cloud. In other words, users can access Insight Advisor and Insight Advisor Chat from activity centers and apps.

Not allowed: Users cannot access Insight Advisor with in Qlik Cloud. In other words, users cannot access Insight Advisor or Insight Advisor Chat from activity centers or apps.

Allowed: Users can access Insight Advisor Chat from Microsoft Teams.

Not allowed: Users cannot access Insight Advisor Chat from Microsoft Teams.

Allowed: Users can request access to content through the standard Qlik process.

Not allowed: Users cannot request access. You can customize the message shown when they try to access content to guide them to your organization's process.

For more information, see Customizing the access request process and Approving access requests.

Allowed: Users can create, update, delete, and list their own webhooks using the webhooks API and automations UI.

Not allowed: Users cannot manage webhooks.

For more information, see Working with webhooks.

Allowed: In the Administration activity center, users can activate and deactivate predictions for any deployed model in the tenant. From any ML deployment they can access, users can also activate and deactivate predictions for the source model.

Not allowed: In the Administration activity center, users cannot activate or deactivate predictions for any deployed model in the tenant. However, users can activate and deactivate predictions for the source model from any ML deployment they have access to.

For more information about model approval by administrators, see Working with model approval as an administrator.

Allowed: Users can list, enable, disable, change the space, change the owner, and delete automations.

Not allowed: Users can only manage their own automations.

Allowed: Users can list, open, and delete any experiment or deployment. Users can also activate and deactivate predictions for any deployed model via the Administration activity center.

Not allowed: Users cannot list or delete experiments or deployments, or activate and deactivate deployed models. They cannot access the Qlik Predict section of the Administration activity center.

Manage ML experiments and deployments

Allowed: Can customize the Insights Home page for all users.

Not allowed: Can only customize their own home pages.

For more information, see Customizing the Insights activity center Home.

Allowed: Can set any collection in the tenant to public or private.

Not allowed: Cannot set any collection in the tenant to public or private.

For more information, see Managing public collections.

Allowed: Users can access and manage all data products without space restrictions.

Not allowed: Users cannot manage data products.

Allowed: Users can manage tenant settings for generating AI-based descriptions for any resources and any validation rule suggestions for datasets. They can access and manage AI generations without space restrictions.

Not allowed: Users cannot manage AI generation settings.

Allowed: Users can access and manage all semantic types.

Not allowed: Users cannot manage semantic types.