Home / Security / User Roles

User Roles

Control access and capabilities with role-based permissions. Assign roles to users for fine-grained security.

👥 Built-in Roles

Datix xAgents includes four pre-configured roles:

👑 Admin

Full system access

Can:

✅ Manage all users, roles, and permissions
✅ Create and configure data sources
✅ Create and manage all agents
✅ Access all query templates
✅ View analytics dashboard
✅ Configure system settings (SMTP, API keys, license)
✅ Access all features

🔧 Manager

Team management and oversight

Can:

✅ View and manage team members
✅ Create agents for their team
✅ Assign agents to users
✅ Create and share query templates
✅ View team analytics
❌ Cannot manage data sources
❌ Cannot modify system settings

📊 Analyst

Data analysis and query creation

Can:

✅ Query data using assigned agents
✅ Create personal query templates
✅ Export query results
✅ View their query history
✅ Share templates with team
❌ Cannot create agents
❌ Cannot manage users

👀 Viewer

Read-only access to data

Can:

✅ Query data using assigned agents
✅ View query results
✅ Export to Excel/CSV
❌ Cannot create templates
❌ Cannot share queries
❌ Cannot modify anything

🎯 Permission Matrix

User Management

Action	Admin	Manager	Analyst	Viewer
Create users	✅	✅	❌	❌
Edit users	✅	✅	❌	❌
Delete users	✅	❌	❌	❌
Assign roles	✅	❌	❌	❌

Data Sources

Action	Admin	Manager	Analyst	Viewer
Create data source	✅	❌	❌	❌
Edit data source	✅	❌	❌	❌
Test connection	✅	✅	❌	❌

AI Agents

Action	Admin	Manager	Analyst	Viewer
Create agent	✅	✅	❌	❌
Edit agent	✅	✅	❌	❌
Assign to users	✅	✅	❌	❌
Use agent	✅	✅	✅	✅

Query Templates

Action	Admin	Manager	Analyst	Viewer
Create template	✅	✅	✅	❌
Share with team	✅	✅	✅	❌
Run template	✅	✅	✅	✅
Schedule template	✅	✅	✅	❌

🔧 Managing Roles

Assigning Roles to Users

Navigate to Admin → Users
Click on a user
Click "Edit"
Select role from dropdown
Click "Save"

Important

Users must logout and login again for role changes to take effect.

Bulk Role Assignment

Assign roles to multiple users at once:

Navigate to Admin → Users
Select users (checkboxes)
Click "Bulk Actions"
Select "Assign Role"
Choose role
Confirm

🎯 Role Assignment Strategies

By Department

Executive Team

Role: Viewer
Access to high-level dashboards

Data Team

Role: Analyst
Full query and template access

Department Heads

Role: Manager
Team oversight and agent management

IT Admins

Role: Admin
System configuration and security

By Use Case

Self-service analytics: Analyst role for business users
Executive dashboards: Viewer role with scheduled templates
Data governance: Admin role for data stewards
Team collaboration: Manager role for team leads

🔐 Security Considerations

Principle of Least Privilege

Best Practice

Assign the minimum role needed for users to perform their job:

Start with Viewer
Upgrade to Analyst if they need to create queries
Upgrade to Manager if they need team oversight
Only assign Admin to trusted IT staff

Regular Audits

Review user roles quarterly
Remove access for departed employees
Downgrade roles when responsibilities change
Monitor admin activity

🎓 Best Practices

✅ Document Policies

Define role assignment criteria in writing

✅ Limit Admins

Keep admin count low (2-3 per organization)

✅ Role Templates

Create standard role assignments by job title

✅ Access Reviews

Quarterly reviews of role assignments

✅ Onboarding Process

Standard role assignment in user onboarding

✅ Offboarding Process

Remove access immediately when users leave

🚀 Advanced Features

Custom Roles (Enterprise)

Enterprise customers can create custom roles:

Define custom permission sets
Mix and match permissions
Create organization-specific roles

Role Inheritance

Roles can inherit permissions from other roles:

Custom_Analyst extends Analyst
  + Can create data sources
  + Can view team analytics

🚀 Next Steps

← Two-Factor Authentication Next: Column Permissions →