Skip to content

Users and Roles

Create MetaMiner users, define roles as sets of permissions, and assign each user one role per environment in the MetaMiner Administrator (MMA).

Before you begin

  • Run MMA on the MetaMiner Server host.
  • Add your environments first. The user grid has one column per environment.
  • For directory users, configure LDAP or Active Directory first. See Import Users from LDAP or AD.

How roles work

  • A role is a named set of permissions. See Permissions Reference.
  • Each user has one role in each environment. The same user can be Administrator in a test environment and Read Only in production.
  • A user with no role in an environment gets No Access there.
  • Roles apply when MetaMiner Security is on. See User-Based Security.
System role Permissions Can be changed
No Access None No
Read Only MetaMiner Client access and the tab permissions: Alerts, Backup/Promote, Meta Query, Report Validation, Security Diff, Servers, Visual Diff, Impact Analysis DB (plus Tableau Finder and Workbook Validation for Tableau environments). No actions that change BusinessObjects No
Administrator Every permission No

Create a role

  1. In MMA, click Security > Define Roles....
  2. Click Add. The Add Role dialog opens.
  3. Enter a Name and a Description.
  4. In Permissions, tick the permissions the role grants. Permissions are grouped under Common, SAP BO, Tableau, PowerBI and Snowflake. Tick a group to select every permission in it.
  5. Click OK.

Image of the Add Role dialog with the SAP BO permission group expanded and several permissions ticked

../images/security/mma-add-role.png

To change a role, select it and click View. Custom roles open in Edit Role; system roles open read-only in View Role. Click Delete to remove a custom role. Deleting a role that is in use moves its users to No Access in those environments.

Build roles from tasks

Start from Read Only needs and add only the actions a group performs, for example a "Content Admin" role with Paste, Rename, Delete and Save As BIAR Backup.

Create a user

  1. Click Security > Define Users.... The grid shows one row per user and one column per environment.
  2. Click Add. The Add User dialog opens.

  3. Fill in the fields:

    Field What to enter
    Name The sign-in name. Names are not case sensitive
    Email Used for notifications and password reset requests
    Password / Confirm password The initial password. Not used for LDAP/Active Directory users
    Force user to change password on next login Recommended for new users
    Enable favorites/inbox visibility Lets the user see other users' Favorites and Inbox folders where BusinessObjects user visibility applies
    MMDB Administrator Gives the user the administrator limits in Meta Query on the web
    Disabled Blocks sign-in without deleting the user
    LDAP/Active Directory User The password is checked against the directory

  4. Click OK.

Image of the Add User dialog with Name, Email and Force user to change password on next login filled in

../images/security/mma-add-user.png

To change a user, select the user and click Edit. The Edit User dialog also shows Failed Attempts with a Reset button, Last Logon, Password Changed and Passwords in History.

Assign roles

  1. In Define Users..., select one or more cells. Each cell is a user in an environment.
  2. Click Assign Role.
  3. Select the role and confirm.

Image of the Define User Based Security grid with users as rows, environments as columns and role names in the cells

../images/security/mma-define-users-grid.png

To force a password change, right-click one or more users and click Force Password Change....

Verify

  1. Connect with the MetaMiner Client as the user.
  2. Check that only the expected tabs appear and that restricted actions are hidden or refused.

Troubleshooting

A tab is missing although the role grants it

Some tab permissions must be granted in every environment the user connects to in that session. See How tab permissions combine.

Changes do not show in an open client

Ask the user to reconnect.

Next steps