Security Roles

A security role defines how different users, or groups, can access the QEs and QAC. To assign a security role you to a user or group you need to access the User and Group detail page in the QAC. Each user can have multiple security roles.

Security role privileges are cumulative: having more than one security role gives a user every privilege available in every role.

The following matrix describes the privileges for each role:

Role	QAC Access	Extension Access
Root Admin	Can access all sections	Can perform all actions
Security Admin	Can only access to the Security section	N/A
Workflow Admin	Can only access to the Workflow Section	N/A
Editor Admin	Can access to all Commentary and Comments section	Can create, update, delete, publish, recall, and submit for approval any commentary in an Insights extension for any application
Approver Admin	Can access only Published Commentaries and Comments and not archived	Can approve any workflow in an Insights extension for any application
Developer Admin	Can only access Invalid Resources link under configuration section	N/A
Writeback Admin	Can perform all actions related to writeback	Can perform all actions in a Writeback Table extension for any application
Pivot Admin	N/A	Can add and delete comments in a Pivot Table extension for any application
Data Connection Admin	N/A	Can add, edit, or delete all writeback connections. However, if there are any security rules associated with data connections, the user can only execute those actions if rules conditions are satisfied.