Understanding administrator roles and responsibilities
Administrators manage and maintain the Qlik Cloud tenant. An individual can hold more than one administrator role, each with specific permissions and responsibilities.
Service account owner
The first user to access the tenant becomes the service account owner (SAO) and initial tenant administrator. The SAO is responsible for:
-
Creating and configuring the tenant.
-
Inviting users to join the tenant.
-
Managing the subscription.
For more information, see Managing your Qlik Cloud subscription
-
Identity provider (IdP) configuration:
-
If the SAO is removed as a tenant admin, you may lose the ability to repair or modify the IdP configuration in Qlik Cloud. If the IdP stops functioning, the original account owner must access the Administration activity center via the recovery URL. However, this recovery will fail if the original account owner is no longer an admin.
-
For more information, see Known limitation in Qlik Cloud Services: Account Owner should not be removed as tenant admin.
-
-
Subscription management:
-
Only the SAO can manage the subscription.
-
To change the SAO, contact Qlik Support or create a support case from the Support Case Portal.
-
For more information, see Qlik Cloud Services: Service Account Owner and Tenant Admin FAQ.
-
Tenant administrator
The tenant administrator is responsible for managing the organization’s Qlik Cloud environment. This role provides full administrative capabilities, such as:
-
Managing users.
-
Configuring system settings.
-
Customizing and extending the tenant.
-
Accessing all features of the Administration activity center.
Key details about the Tenant Admin role:
-
At least one tenant admin is required at all times.
-
You cannot remove the Tenant Admin role from yourself to prevent accidental removal of the last tenant admin.
-
Tenant admins can assign the Tenant Admin role to other users.
Anyone assigned the Tenant Admin role may be granted access to content, including personal content, relating to all users within the tenant to which the Tenant Admin role is assigned.
Specialized administrator roles
In addition to tenant admins, there are administrator roles with more focused responsibilities and limited access:
Analytics administrator
The analytics administrator manages user resources related to analytics services within shared and managed spaces. Their responsibilities include managing:
-
Apps
-
Scripts
-
Data files
-
Data connections
Limitations
Analytics Admins cannot access content in other users' personal spaces.
Data administrator
The data administrator manages resources for data integration services within data spaces. Their responsibilities include:
-
Managing data spaces from the Administration activity center.
-
Managing data resources in Data Integration Home.
Limitations
Data Admins cannot access content in other users' personal spaces.
Audit administrator
Audit administrators with the Developer role can access app feedback and usage metrics captured by the Natural Language API.
Permissions granted by administrator roles
For details about the permissions associated with each administrator role, see:
-
Permissions granted by security roles (capacity-based subscriptions)
-
Permissions granted by security roles (user-based subscriptions)
-
Permissions granted by security roles (Qlik Anonymous Access subscriptions)