> For the complete documentation index, see [llms.txt](https://help.tellius.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.tellius.com/tellius-6.4/settings/users-and-access/user-roles-and-permissions.md).

# User roles and permissions

Explore Tellius user roles and permissions, from Admin to View. Understand each role’s access level to manage data, Vizpads, Insights, and settings securely.

User access and permissions within Tellius are controlled through roles. Each role is designed to give users the necessary permissions to perform their specific tasks while maintaining the security and integrity of data within the platform. Here, we outline the various user roles available in Tellius, along with the permissions associated with each role.

{% hint style="info" %}
Besides the built-in roles on this page, administrators can create their own roles and set, module by module, what each role can reach. See [Custom roles](https://help.tellius.com/settings/users-and-access/custom-roles).
{% endhint %}

### **User roles in Tellius**

1. **Admin**
2. **Power**
3. **Interactive**
4. **Explorer**
5. **Discoverer**
6. **Explore & Discover**
7. **View**
8. **Content Admin**

The Roles page under **Settings → Workspace → Users & Access → Roles** also lists **Super User**, which holds every module, and **Free** and **Restricted Free**, separate built-in roles kept from earlier releases. Open any role there to see the level it holds for each module.

{% hint style="warning" %}
**Data download in Tellius 6.4.** The built-in **Interactive**, **Explorer**, **Discoverer**, **Explore & Discover** and **View** roles don't include the **Data download** module. Their users can't download the raw data behind a dataset or Business View. **Admin**, **Power** and **Content Admin** keep it. Exporting a chart, Vizpad or Insight isn't affected, and custom roles keep the setting they have. To let one of these built-in roles download raw data again, edit the role and set **Data download** to **Full Access**. See [Custom roles](https://help.tellius.com/settings/users-and-access/custom-roles).
{% endhint %}

{% hint style="info" %}
**Kaiya Apps and Missions in Tellius 6.4.** Every role, built-in or custom, holds a level for the **Apps** and **Missions** modules. Building an App in Kaiya chat, saving a new version of it or changing its code needs **Full Access** to **Apps**, and creating a Mission needs **Full Access** to **Missions**. With **Read Access**, users open and use what others publish. Renaming or deleting someone else's App also works with **Content management**, which the Content Admin role holds. To see the level a built-in role holds, open it on the Roles page. See [Modules you can set](https://help.tellius.com/settings/users-and-access/custom-roles#modules-you-can-set).
{% endhint %}

### **Admin**

The Admin role is designed for users who need full access to the platform's features and settings. Admins have the highest level of permissions, allowing them to manage users, security settings, data sources, and more.

* **Data import**: Full access to import data from any source.
* **Data source management**: Ability to share and view any data source.
* **Data preparation**: Full control over data transformations and sharing prepared data.
* **Business View**: Create, edit, and share Business Views, calculated columns, and column groupings.
* **Data export**: Export data from preparations, Business Views, Vizpad, Insights, and Search.
* **Search capabilities**: Admins can perform default searches, use Kaiya search, add visualizations to Vizpad, and create Insights.
* **Vizpads**: Full permissions to create, edit, and share Vizpads.
* **Insight creation**: Create, edit, and share Insights.
* **Feed management**: Create and edit Feed.
* **Predict**: Create and apply predictive models.
* **Settings**: Complete control over user & group management, security settings, embedding, user licensing, and application settings.

### **Power**

The Power role gives comprehensive access but is limited in certain administrative functions compared to Admin. It suits users who need broad access for day-to-day data operations but don't need to manage Tellius security or user configurations.

* **Data import**: Full access to import data from any source.
* **Data source management**: Ability to share and view any data source.
* **Data preparation**: Full control over data transformations and sharing prepared data.
* **Business View**: Create, edit, and share Business Views, calculated columns, and column groupings.
* **Data export**: Export data from preparations, Business Views, Vizpad, Insights, and Search.
* **Search capabilities**: Can perform default searches, use Kaiya search, add visualizations to Vizpad, and create Insights.
* **Vizpads**: Full permissions to create, edit, and share Vizpads.
* **Insight creation**: Create, edit, and share Insights.
* **Feed management**: Create and edit Feed.
* **Predict**: Create and apply predictive models.
* **Settings**: No access to any type of settings.

### **Interactive**

Interactive users have extensive access to explore and interact with data, making them ideal for users focused on data analysis but with limitations on administrative functions and model creation.

* **Data import**: No permissions to import data.
* **Data source management**: Cannot share or view any data source.
* **Data preparation**: Cannot perform data transformations or share prepared data.
* **Business View**: Cannot create, edit, or share Business Views, calculated columns, and column groupings.
* **Data export**: Can export data from only Vizpads and Search.
* **Search capabilities**: Can perform default searches, use Kaiya search, add visualizations to Vizpad, and create Insights.
* **Vizpads**: Can create, edit, and share Vizpads.
* **Insight creation**: Can create, edit, and share Insights.
* **Feed management**: Can create and edit Feed.
* **Predictive modeling**: No permissions for creating models but can apply existing models.
* **Settings**: No access to any type of settings.

### **Explorer**

Explorers are users primarily focused on exploring and analyzing data. They have permissions to work with data but cannot make changes to settings, key data configuration, share or manage other users.

* **Data import**: No permissions to import data.
* **Data source management**: Cannot share or view any data source.
* **Data preparation**: Cannot perform data transformations or share prepared data.
* **Business View**: Cannot create, edit, or share Business Views, calculated columns, and column groupings.
* **Data export**: Can export data from only Vizpads and Search.
* **Search capabilities**: Can perform default searches, use Kaiya search, add visualizations to Vizpad, but cannot create Insights.
* **Vizpads**: Can create, edit, and share Vizpads.
* **Insight creation**: Cannot create, edit, or share Insights.
* **Feed management**: No permissions for creating or editing feeds.
* **Predictive modeling**: No permissions for creating or applying models.
* **Settings**: No access to any type of settings.

### **Discoverer**

The Discoverer role is tailored for users who need read-only access to view data without the ability to make modifications or create new analyses.

* **Data import**: No permissions to import data.
* **Data source management**: Cannot share or view data sources.
* **Data preparation**: No permissions for data transformations or sharing.
* **Business View**: Cannot create, edit, or share Business Views, calculated columns, and column groupings.
* **Data export**: Can only export data from Vizpad, Insights, and Search.
* **Search capabilities**: Can perform default searches, use Kaiya search, add visualizations to Vizpad, and create Insights.
* **Vizpad**: Can only share Vizpads but cannot create or edit.
* **Insight creation**: Can create, edit, and share Insights.
* **Feed management**: Can create and edit Feed.
* **Predict**: No permissions.
* **Settings**: No access.

### **Explore & Discover**

The **Explore & Discover** role combines the permissions of **Explorer** and **Discoverer** in a single role, so the user can explore and analyze data while still working in a more controlled environment.

* **Data import**: No permissions to import data.
* **Data source management**: Cannot share or view data sources.
* **Data preparation**: No permissions for data transformations or sharing.
* **Business View**: Cannot create, edit, or share Business Views, calculated columns, and column groupings.
* **Data export:** Can export only Vizpads, Insights, and Search.
* **Search capabilities**: Can perform default searches, use Kaiya search, add visualizations to Vizpad, and create Insights.
* **Vizpads**: Full permissions to create, edit, and share Vizpads.
* **Insight creation**: Create, edit, and share Insights.
* **Feed management**: Create and edit Feed.
* **Predict**: No permissions.
* **Settings**: No access.

### **View**

The View role has the most restricted access, allowing users to view data and visualizations without any ability to modify or create content.

* **Data import**: No permissions.
* **Data source management**: Can only view data sources but cannot share or modify.
* **Data preparation**: No permissions.
* **Business View**: No permissions.
* **Data export**: Can export data from Vizpad, Insights, and Search. Downloading the raw data behind a dataset or Business View isn't included.
* **Search capabilities**: Can perform only default Search and Kaiya Search.
* **Vizpad**: No permissions,
* **Insight creation**: No permissions,
* **Feed management**: No permissions.
* **Predictive modeling**: No permissions.
* **Settings**: No access.

### **Content admin**

The Content admin role is for the person who looks after content across the whole instance: the datasets, Business Views and Vizpads that every user has created. It means content always has someone responsible for it, even when the person who built it moves on.

A Content admin can do everything a regular user can, such as creating their own content and uploading datasets. On top of that, they can:

* **See every user's content.** On the Data pages, pick a user from the user dropdown to see the datasets and Business Views that user owns. Business View lists open with your own and shared Business Views, so use the user filter to see anyone else's.
* **Work with that content.** Open another user's dataset or Business View, check its metadata, and act on it.
* **Share any user's content** with other users.
* **Manage Kaiya content.** The same standing access covers Kaiya content as well as Datasets, Business Views and Vizpads.
* **Continue another user's conversation.** Open another user's Kaiya conversation, including its files and Rich Summary, and select **Continue this conversation** to carry on in your own copy.
* **Work with other users' datasets.** Use dataset tools such as scripting, data fusion, schedules, and Python and SQL transforms on other users' datasets, and export those datasets.
* **Create folders and import** Business Views and Datasets.
* **See all users' content on the Connect and Refresh Pipeline tabs.** The filter that picks whose content you see is named **User**.
* **Content management.** Content Admin has Full access to **Content management**. With it, a Content Admin can open, edit and delete anyone's Vizpads, datasets, Insights, models, Kaiya chats, Apps and context models, even when they haven't been shared with them.
* **Missions are view only.** A Content Admin can open anyone's Missions but can't change them.

On the Roles page, the built-in Content Admin role has Full access to every module except **Manage workspace** and **Manage system**, which are set to No access.

Because a Content admin can always see and manage content across the platform, content keeps running when the person who built it leaves or changes teams.

<figure><img src="https://1702728550-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FC5PhRxmOjkQZJEO6F9Zw%2Fuploads%2FX3vmdt0aKHnv0nPkt4kH%2Fimage.png?alt=media&amp;token=dd6c5ead-0352-4e20-87fc-1ca2067c408f" alt="" width="261"><figcaption></figcaption></figure>

{% hint style="info" %}
Super users have the same access to content across users.
{% endhint %}

<table><thead><tr><th width="146.61328125">Permissions</th><th>Admin</th><th>Content Admin</th><th>Power</th><th>Interactive</th><th>Explorer</th><th>Discoverer</th><th>Explore &#x26; Discover</th><th>View</th></tr></thead><tbody><tr><td>Data Import</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Data Source Sharing &#x26; Viewing</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td>View only</td></tr><tr><td>Data Prep (Transformation &#x26; Sharing)</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Business View</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access, including every user's Business Views</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Data Export</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td>Limited (Vizpad, Search)</td><td>Limited (Vizpad, Search)</td><td>Limited (Vizpad, Insights, Search)</td><td>Limited (Vizpad, Insights, Search)</td><td>Limited (Vizpad, Insights, Search)</td></tr><tr><td>Search</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td>Limited (cannot create Insight)</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td>Limited (default, Kaiya Search)</td></tr><tr><td>Vizpads</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access, including every user's Vizpads</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td>Limited (sharing only)</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Insights</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access, including other users' Insights</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Feed</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Predict</td><td><mark style="background-color:green;">Full access</mark></td><td><mark style="background-color:green;">Full access, including other users' models</mark></td><td><mark style="background-color:green;">Full access</mark></td><td>Limited (cannot create)</td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td></tr><tr><td>Settings</td><td><mark style="background-color:green;">Full access</mark></td><td>Limited (own profile and System health)</td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td><td><mark style="color:red;">No access</mark></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://help.tellius.com/tellius-6.4/settings/users-and-access/user-roles-and-permissions.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.