Connection and model permissions reference

Refer to the Assigning permissions guide to learn how to assign permissions to users.

Documents

This section describes the actions different connection/model roles can take regarding documents.

Permission	No access	Viewer	Restricted Querier	Querier	Modeler	Connection Admin
Create documents	❌	❌	✅	✅	✅	✅
View document names on homepage	❌	✅	✅	✅	✅	✅

Workbooks

This section describes the actions different connection/model roles can take in the workbook section of a document.

Permission	No access	Viewer	Restricted Querier	Querier	Modeler	Connection Admin
Access workbooks	❌	❌	✅	✅	✅	✅
Upload CSV & XLSX files	❌	❌	✅	✅	✅	✅
Run topic-based queries	❌	❌	✅	✅	✅	✅
Run all queries	❌	❌	❌	✅	✅	✅
Create & run SQL queries	❌	❌	❌	✅	✅	✅
View SQL query results	❌	❌	❌*	✅	✅	✅
Use functions & formulas	❌	❌	✅	✅	✅	✅
Create & edit visualizations	❌	❌	✅	✅	✅	✅
Use AI query or AI spreadsheet calculations	❌	❌	✅	✅	✅	✅

* Can be enabled via the View SQL granular permission on a custom Restricted Querier role.

Dashboards

This section describes the actions different connection/model roles can take in the dashboard section of a document.

Permission	No access	Viewer	Restricted Querier	Querier	Modeler	Connection Admin
Access dashboards	✅	✅	✅	✅	✅	✅
Create & edit dashboards	❌	❌	✅	✅	✅	✅
View topic-based charts	❌	✅	✅	✅	✅	✅
View non-topic based charts	❌	❌	❌	✅	✅	✅
Download	❌	✅	✅	✅	✅	✅
Create schedules & alerts	❌	✅	✅	✅	✅	✅
Use filters & controls	❌	✅	✅	✅	✅	✅
Use drill functionality	❌	✅	✅	✅	✅	✅

Modeling

This section describes the actions different connection/model roles can take when interacting with the connection’s model.

Permission	No access	Viewer	Restricted Querier	Querier	Modeler	Connection Admin
Stage workbook model changes	❌	❌	✅	✅	✅	✅
Access the Content Validator	❌	❌	❌	✅	✅	✅
Stage shared data model changes using a branch	❌	❌	❌	✅	✅	✅
Directly edit the shared data model	❌	❌	❌	❌	✅	✅
Refresh schema (single model connection)	❌	❌	❌	❌	✅	✅
Refresh schema (multi-model connection)	❌	❌	❌	❌	❌	✅
Rename a shared model or shared extension	❌	❌	❌	❌	❌	✅
Create a shared extension model	❌	❌	❌	❌	❌	✅
Edit connection settings	❌	❌	❌	❌	❌	✅

Branches

This section describes the actions different connection/model roles can take when interacting with branches.

Permission	No access	Viewer	Restricted Querier	Querier	Modeler	Connection Admin
View branches	❌	❌	❌	✅	✅	✅
Create branches	❌	❌	❌	✅	✅	✅
Merge branches	❌	❌	❌	❌	✅	✅

Administration

This section describes the actions different connection/model roles can take regarding the connection’s settings. Note: Managing users, such as inviting them to your Omni instance, is handled by Organization Admins.

Permission	No access	Viewer	Restricted Querier	Querier	Modeler	Connection Admin
Manage connection permissions	❌	❌	❌	❌	❌	✅
Manage connection settings	❌	❌	❌	❌	❌	✅

Connect data

Manage users and permissions

Manage organization

Identity Providers

Security

Monitor Omni

Connection and model permissions reference

Documents

Workbooks

Dashboards

Modeling

Branches

Administration

​Documents

​Workbooks

​Dashboards

​Modeling

​Branches

​Administration

Documents

Workbooks

Dashboards

Modeling

Branches

Administration