Strategy One
Privileges for Predefined Security Roles
Mainstream support for legacy tools such as Developer, Command Manager, and Object Manager is set to end December 2026. Strategy suggests that you upgrade to Workstation to maintain continuity and utilize modern capabilities. For more information on functional parity between these tools and Workstation, see the Workstation vs Legacy Tools Feature Parity dashboard.
The Strategy product suite contains a number of predefined security roles for administrators. These roles makes it easy to delegate administrative tasks.
The predefined project administration roles apply project-level administrative privileges. The default privileges that are automatically granted for these out-of-the-box security roles are listed below.
Privileges vary between releases. For the most up to date privileges, see the dashboard in Privileges by License Type.
For a list of additional out-of-the-box security roles, see Assign Security Roles.
Platform Administrators and System Administrators have the following privileges:
Client - Reporter
-
Use Library Web
-
Use send preview Now
-
Web add to History List
-
Web add/remove units to/from Grid in Document in view mode
-
Web advanced drilling
-
Web alias objects
-
Web change user preferences
-
Web change view mode
-
Web configure Toolbars
-
Web create Derived Metrics and Derived Attributes
-
Web define Derived Elements
-
Web drill and link
-
Web drill on Metrics
-
Web execute data mart Report
-
Web export
-
Web filter on selections
-
Web manage Objects
-
Web modify subtotals
-
Web object search
-
Web pivot Report
-
Web print mode
-
Web re-execute Report against warehouse
-
Web simple graph formatting
-
Web simultaneous execution
-
Web sort
-
Web switch Page-by Elements
-
Web use Locked Headers
-
Web use Report Objects Window
-
Web use View Filter Editor
-
Web user
Client - Web
-
Set OAuth parameters for Cloud App sources
-
Use Desktop
-
Use office
-
Web choose attribute form display
-
Web create custom HTML and JavaScript content
-
Web create Dashboard
-
Web create new Report
-
Web Dashboard design
-
Web define advanced Report options
-
Web define Intelligent Cube Report
-
Web define MDX Cube Report
-
Web Document design
-
Web edit Dashboard
-
Web edit drilling and links
-
Web edit notes
-
Web format Grid and Graph
-
Web manage Document and Dashboard datasets
-
Web modify the list of Report Objects (use object browser -- all objects)
-
Web number formatting
-
Web publish Intelligent Cube
-
Web Report details
-
Web Report SQL
-
Web save Dashboard
-
Web save Templates and Filters
-
Web save to My Reports
-
Web save to Shared Reports
-
Web set column widths
-
Web subscribe others
-
Web use Advanced Threshold Editor
-
Web use Custom Group Editor
-
Web use Design Mode
-
Web use Filter Editor
-
Web use Metric Editor
-
Web use object Sharing Editor
-
Web use Prompt Editor
-
Web use Visual Threshold Editor
Client - Application
-
Use Application
Client - Mobile
-
Email screenshot from device
-
Mobile run Dashboard
-
Mobile run Document
-
Print from device
-
Use MicroStrategy Mobile
Client - Architect
-
Alias objects
-
Bypass schema objects security access checks
-
Change user preference
-
Configure toolbars
-
Create custom HTML and JavaScript content
-
Create dataset in Workstation
-
Create Derived Metrics
-
Define MDX Cube Report
-
Define query builder Report
-
Drill and link
-
Execute Document
-
Format graph
-
Import function
-
Import MDX cube
-
Modify Report subtotals
-
Modify sorting
-
Modify the list of Report objects (use object browser)
-
Pivot Report
-
Re-execute Report against warehouse
-
Save custom autostyle
-
Send to Email
-
Set attribute display
-
Use Architect Editors
-
Use Consolidation Editor
-
Use Custom Group Editor
-
Use data explorer
-
Use Data Mart Editor
-
Use design mode
-
Use Developer
-
Use Document Editor
-
Use Drill Map Editor
-
Use Filter Editor
-
Use Find and Replace Dialog
-
Use Formatting Editor
-
Use grid options
-
Use History List
-
Use Link Editor
-
Use Metric Editor
-
Use Object Manager
-
Use Object Manager Read-only
-
Use project documentation
-
Use Prompt Editor
-
Use report data options
-
Use Report Editor
-
Use Report Objects Window
-
Use Search Editor
-
Use SQL statements tab in Datamart/Bulk Export Editors
-
Use Subtotal Editor
-
Use Template Editor
-
Use Thresholds Editor
-
Use View Filter Editor
-
Use VLDB property editor
-
View ETL information
-
View SQL
Server - Reporter
-
Drill within Intelligent Cube
-
Execute Report that use multiple data sources
-
Export to .MSTR File
-
Export to Excel
-
Export to Flash
-
Export to HTML
-
Export to PDF
-
Export to text
-
Save personal prompt answers
-
Schedule request
-
Use analytics
-
Use dynamic sourcing
-
Use server cache
-
View History List
-
View notes
-
Web run Dashboard
-
Web run Document
-
Web subscribe to History List
Server - Intelligence
-
Add notes
-
Administer Caches
-
Administer Cubes
-
Administer History Lists
-
Administer jobs
-
Administer quick search indices
-
Administer Subscriptions
-
Administer user connections
-
Assign Security Filters
-
Assign security roles
-
Audit change journal
-
Bypass all object security access checks
-
Can certify content
-
Configure caches
-
Configure change journaling
-
Configure connection map
-
Configure governing
-
Configure language settings
-
Configure project basic
-
Configure project data source
-
Configure security settings
-
Configure statistics
-
Configure subscription settings
-
Create and edit Security Filters
-
Create application objects
-
Create new folder
-
Create schema objects
-
Create shortcut to objects
-
Duplicate project
-
Edit notes
-
Edit project status
-
Idle and resume project
-
Import .MSTR File
-
Load and unload project
-
Monitor caches
-
Monitor Cubes
-
Monitor History Lists
-
Monitor Jobs
-
Monitor project
-
Monitor subscriptions
-
Monitor user connections
-
Publish Content
-
Use Freeform SQL Editor
-
Use Integrity Manager
-
Use Repository Translation Wizard
-
Use Translation Editor
-
Use Translation Editor bypass
-
Use Workstation
-
Web administration
Server - Analytics
- Access data (files) from Local, URL, DropBox, Google Drive, Sample Files, Clipboard, Push API
- Access data from Cloud App (Google Analytics, Salesforce Reports, Facebook, Twitter)
- Access data from Databases, Google BigQuery, BigData, OLAP, BI tools
- Define Derived Elements
- Define Intelligent Cube Report
- Import table from multiple data sources
- Publish Intelligent Cube
- Save Derived Elements
- Use Intelligent Cube Editor
- Web save Derived Elements
Server - Collaboration
-
Use collaboration services
Server - Distribution
-
Create Dynamic Address List
-
Create Email address
-
Create file location
-
Create FTP location
-
Create print location
-
Subscribe Dynamic Address List
-
Subscribe to Email
-
Subscribe to file
-
Subscribe to FTP
-
Subscribe to print
-
Use Bulk Export Editor
-
Use distribution services
-
Use link to History List in Email
-
Use send now
-
Web create alert
-
Web subscribe to bulk export
Server - Transaction
-
Define Transaction Report
-
Execute Transaction
-
Web configure Transaction
Power Users have the following privileges:
Client - Reporter
-
Use Library Web
-
Use send preview Now
-
Web add to History List
-
Web add/remove units to/from Grid in Document in view mode
-
Web advanced drilling
-
Web alias objects
-
Web change user preferences
-
Web change view mode
-
Web configure Toolbars
-
Web create Derived Metrics and Derived Attributes
-
Web define Derived Elements
-
Web drill and link
-
Web drill on Metrics
-
Web execute data mart Report
-
Web export
-
Web filter on selections
-
Web manage Objects
-
Web modify subtotals
-
Web object search
-
Web pivot Report
-
Web print mode
-
Web re-execute Report against warehouse
-
Web simple graph formatting
-
Web simultaneous execution
-
Web sort
-
Web switch Page-by Elements
-
Web use Locked Headers
-
Web use Report Objects Window
-
Web use View Filter Editor
-
Web user
Client - Web
-
Set OAuth parameters for Cloud App sources
-
Use Desktop
-
Use office
-
Web choose attribute form display
-
Web create custom HTML and JavaScript content
-
Web create Dashboard
-
Web create new Report
-
Web Dashboard design
-
Web define advanced Report options
-
Web define Intelligent Cube Report
-
Web define MDX Cube Report
-
Web Document design
-
Web edit Dashboard
-
Web edit drilling and links
-
Web edit notes
-
Web format Grid and Graph
-
Web manage Document and Dashboard datasets
-
Web modify the list of Report Objects (use object browser -- all objects)
-
Web number formatting
-
Web publish Intelligent Cube
-
Web Report details
-
Web Report SQL
-
Web save Dashboard
-
Web save Templates and Filters
-
Web save to My Reports
-
Web save to Shared Reports
-
Web set column widths
-
Web subscribe others
-
Web use Advanced Threshold Editor
-
Web use Custom Group Editor
-
Web use Design Mode
-
Web use Filter Editor
-
Web use Metric Editor
-
Web use object Sharing Editor
-
Web use Prompt Editor
-
Web use Visual Threshold Editor
Client - Mobile
-
Email screenshot from device
-
Mobile run Dashboard
-
Mobile run Document
-
Print from device
-
Use MicroStrategy Mobile
Client - Architect
-
Alias objects
-
Bypass schema objects security access checks
-
Change user preference
-
Configure toolbars
-
Create custom HTML and JavaScript content
-
Create dataset in Workstation
-
Create Derived Metrics
-
Define MDX Cube Report
-
Define query builder Report
-
Drill and link
-
Execute Document
-
Format graph
-
Import function
-
Import MDX cube
-
Modify Report subtotals
-
Modify sorting
-
Modify the list of Report objects (use object browser)
-
Pivot Report
-
Re-execute Report against warehouse
-
Save custom autostyle
-
Send to Email
-
Set attribute display
-
Use Architect Editors
-
Use Consolidation Editor
-
Use Custom Group Editor
-
Use data explorer
-
Use Data Mart Editor
-
Use design mode
-
Use Developer
-
Use Document Editor
-
Use Drill Map Editor
-
Use Filter Editor
-
Use Find and Replace Dialog
-
Use Formatting Editor
-
Use grid options
-
Use History List
-
Use Link Editor
-
Use Metric Editor
-
Use Object Manager
-
Use Object Manager Read-only
-
Use project documentation
-
Use Prompt Editor
-
Use report data options
-
Use Report Editor
-
Use Report Objects Window
-
Use Search Editor
-
Use SQL statements tab in Datamart/Bulk Export Editors
-
Use Subtotal Editor
-
Use Template Editor
-
Use Thresholds Editor
-
Use View Filter Editor
-
Use VLDB property editor
-
View ETL information
-
View SQL
Server - Reporter
-
Drill within Intelligent Cube
-
Execute Report that use multiple data sources
-
Export to .MSTR File
-
Export to Excel
-
Export to Flash
-
Export to HTML
-
Export to PDF
-
Export to text
-
Save personal prompt answers
-
Schedule request
-
Use analytics
-
Use dynamic sourcing
-
Use server cache
-
View History List
-
View notes
-
Web run Dashboard
-
Web run Document
-
Web subscribe to History List
Server - Intelligence
-
Add notes
-
Administer Caches
-
Administer Cubes
-
Administer History Lists
-
Administer jobs
-
Administer quick search indices
-
Administer Subscriptions
-
Administer user connections
-
Assign Security Filters
-
Assign security roles
-
Audit change journal
-
Bypass all object security access checks
-
Can certify content
-
Configure caches
-
Configure change journaling
-
Configure connection map
-
Configure governing
-
Configure language settings
-
Configure project basic
-
Configure project data source
-
Configure security settings
-
Configure statistics
-
Configure subscription settings
-
Create and edit Security Filters
-
Create application objects
-
Create new folder
-
Create schema objects
-
Create shortcut to objects
-
Duplicate project
-
Edit notes
-
Edit project status
-
Idle and resume project
-
Import .MSTR File
-
Load and unload project
-
Monitor caches
-
Monitor Cubes
-
Monitor History Lists
-
Monitor Jobs
-
Monitor project
-
Monitor subscriptions
-
Monitor user connections
-
Publish Content
-
Use Freeform SQL Editor
-
Use Integrity Manager
-
Use Repository Translation Wizard
-
Use Translation Editor
-
Use Translation Editor bypass
-
Use Workstation
-
Web administration
Server - Analytics
- Access data (files) from Local, URL, DropBox, Google Drive, Sample Files, Clipboard, Push API
- Access data from Cloud App (Google Analytics, Salesforce Reports, Facebook, Twitter)
- Access data from Databases, Google BigQuery, BigData, OLAP, BI tools
- Define Derived Elements
- Define Intelligent Cube Report
- Import table from multiple data sources
- Publish Intelligent Cube
- Save Derived Elements
- Use Intelligent Cube Editor
- Web save Derived Elements
Server - Collaboration
-
Use collaboration services
Server - Distribution
-
Create Dynamic Address List
-
Create Email address
-
Create file location
-
Create FTP location
-
Create print location
-
Subscribe Dynamic Address List
-
Subscribe to Email
-
Subscribe to file
-
Subscribe to FTP
-
Subscribe to print
-
Use Bulk Export Editor
-
Use distribution services
-
Use link to History List in Email
-
Use send now
-
Web create alert
-
Web subscribe to bulk export
Server - Transaction
-
Define Transaction Report
-
Execute Transaction
-
Web configure Transaction
Project Bulk Administrators have the following Object Manager privileges:
-
Use Object Manager
-
Use Repository Translation Wizard
Project Operations Administrators have the following privileges:
-
Schedule Request (in Common Privileges)
-
Administer Caches
-
Administer Cubes
-
Administer Jobs
-
Administer Subscriptions
-
Administer User Connections
-
Idle and Resume Project
-
Load and Unload Project
Project Operations Monitors have the following privileges:
-
Administer Caches
-
Administer Jobs
-
Administer User Connections
-
Audit Change Journal
-
Idle and Resume Project
-
Load and Unload Project
-
Monitor Caches
-
Monitor Cubes
-
Monitor History Lists
-
Monitor Jobs
-
Monitor Project
-
Monitor Subscriptions
-
Monitor User Connections
-
Administer Quick Search Indices
Project Resource Settings Administrators have the following privileges:
-
Configure Caches
-
Configure Governing
-
Configure Language Settings
-
Configure Project Basic
-
Configure Project Data Source
-
Configure Statistics
-
Configure Subscription Settings
-
Edit Project Status
-
Web Administration
Project Security Administrators have the following privileges:
-
Create Application Objects (Server - Intelligence)
-
Assign Security Filters
-
Assign Security Roles
-
Configure Change Journaling
-
Configure Connection Map
-
Configure Security Settings
-
Create And Edit Security Filters
