DataLens roles

There are two types of roles in DataLens:

• For service access: These roles are assigned to an organization and grant access to DataLens.
• For workbooks and collections: These roles define the access level to each workbook or collection. They apply to users who switched to workbooks and collections to store their objects in DataLens.

Roles required to access the serviceRoles required to access the service

To grant a user access to DataLens, assign them a role. You can assign roles to a Yandex account, service account, federated users, user group, system group, or public group.

Roles for workbooks and collectionsRoles for workbooks and collections

These roles are valid for users who adopted the new DataLens object layout: in workbooks and collections. The roles allow you to configure access level to each workbook or collection for a user or user group.

Roles for workbooksRoles for workbooks

You can assign roles for workbooks to a user.

datalens.workbooks.limitedViewerdatalens.workbooks.limitedViewer

You can assign the datalens.workbooks.limitedViewer role to a workbook. With it, you can view all workbook's nested charts and dashboards and the info on the access permissions granted for such a workbook. In the DataLens UI, this role is referred to as Limited viewer. You may want to only assign this role through the DataLens UI.

datalens.workbooks.viewerdatalens.workbooks.viewer

You can assign the datalens.workbooks.viewer role to a workbook. With it, you can view all workbook's nested objects and the info on the access permissions granted for such a workbook. In the DataLens UI, this role is referred to as Viewer. You may want to only assign this role through the DataLens UI.

This role also includes the datalens.workbooks.limitedViewer permissions.

datalens.workbooks.editordatalens.workbooks.editor

You can assign the datalens.workbooks.editor role to a workbook. With it, you can edit both the workbook and all its nested objects. In the DataLens UI, this role is referred to as Editor. You may want to only assign this role through the DataLens UI.

Users with this role can:

• Edit the relevant workbook and create copies of it.
• View and edit all workbook's nested objects.
• View info on the access permissions granted for the workbook.

This role also includes the datalens.workbooks.viewer permissions.

datalens.workbooks.admindatalens.workbooks.admin

You can assign the datalens.workbooks.admin role to a workbook. With it, you can manage the relevant workbook and access to it, as well as all its nested objects. In the DataLens UI, this role is referred to as Admin. You may want to only assign this role through the DataLens UI.

Users with this role can:

• View info on the access permissions granted for the relevant workbook and modify such permissions.
• Edit, move, create copies of, and delete the relevant workbook.
• View and edit all workbook's nested objects.
• Embed the workbook's nested private objects to websites and apps.
• Publish the workbook's nested objects.

This role also includes the datalens.workbooks.editor permissions.

Roles for collectionsRoles for collections

You can assign a user roles for collections.

datalens.collections.limitedViewerdatalens.collections.limitedViewer

You can assign the datalens.collections.limitedViewer role to a collection. It allows you to view the info on it and its nested collections and workbooks, which includes viewing charts and dashboards of the nested workbook workbooks. In the DataLens UI, this role is referred to as Limited viewer. You may want to only assign this role through the DataLens UI.

Users with this role can:

• View info on the relevant collection and its nested workbooks and collections.
• View info on the access permissions granted for the appropriate collection, as well as for its nested collections and workbooks.
• View charts and dashboards nested into the workbooks related to the appropriate collection and its nested collections.

This role also includes the datalens.workbooks.limitedViewer permissions.

datalens.collections.viewerdatalens.collections.viewer

You can assign the datalens.collections.viewer role to a collection. It allows you to view the info on it and its nested collections and workbooks, as well as view all nested workbook objects. In the DataLens UI, this role is referred to as Viewer. You may want to only assign this role through the DataLens UI.

Users with this role can:

• View info on the relevant collection and its nested workbooks and collections.
• View info on the access permissions granted for the appropriate collection, as well as for its nested collections and workbooks.
• View all nested objects of the workbooks related to the appropriate collection and its nested collections.

This role also includes the datalens.collections.limitedViewer and datalens.workbooks.viewer permissions.

datalens.collections.editordatalens.collections.editor

You can assign the datalens.collections.editor role to a collection. It allows you to edit the relevant collection and all its nested collections, workbooks, and all objects within such workbooks. In the DataLens UI, this role is referred to as Editor. You may want to only assign this role through the DataLens UI.

Users with this role can:

• View info on the relevant collection and its nested collections and workbooks.
• Edit the relevant collection and all its nested collections and workbooks.
• Create copies of the relevant collection and all its nested collections and workbooks.
• Create new collections and workbooks within the relevant collection and all its nested ones.
• View and edit all nested objects of the workbooks related to the appropriate collection and its nested collections.
• View info on the access permissions granted for the appropriate collection, as well as for its nested collections and workbooks.

This role also includes the datalens.collections.viewer and datalens.workbooks.editor permissions.

datalens.collections.admindatalens.collections.admin

You can assign the datalens.collections.admin role to a collection. It allows you to manage the relevant collection and access to it, as well as all its nested collections, workbooks, and all objects within such workbooks. In the DataLens UI, this role is referred to as Admin. You may want to only assign this role through the DataLens UI.

Users with this role can:

• View info on the access permissions granted for the appropriate collection and for its nested collections and workbooks, as well as modify such access permissions.
• View info on the relevant collection and its nested collections and workbooks.
• Edit the relevant collection and all its nested collections and workbooks, as well as create copies of it.
• Move and delete the relevant collection and all its nested collections and workbooks.
• Create new collections and workbooks within the relevant collection.
• View and edit all nested objects of the workbooks related to the appropriate collection and its nested collections.
• Embed the private objects nested into workbooks related to the relevant collection and its nested ones, to websites and apps.
• Publish the objects nested into the workbooks related to the appropriate collection and its nested collections.

This role also includes the datalens.collections.editor and datalens.workbooks.admin permissions.