Skip to content
DataSquaresDocs

Users, roles & invites

Everything related to team management, access governance, and workspace segmentation lives under Admin — covering users, custom roles, menu access, user groups, workspaces, and invitation lifecycles.

Users

Section titled “Users”

The Users tab (/admin/users) lists every registered workspace member with their role badge, account status (Active, Inactive, Pending), authentication method (SSO provider or local password), and last login timestamp.

Admins can perform full user lifecycle operations:

  • Create User: Add local user accounts with assigned roles.
  • Edit Member Details: Update names, roles, and company affiliations.
  • Deactivate & Reactivate: Temporarily suspend or restore user accounts without deleting history.
  • Reset Password: Generate a secure password reset link or trigger an administrative password reset.
  • Transfer Ownership: Promote or reassign administrative privileges.

System roles

Section titled “System roles”

Every workspace provisions three immutable system roles:

Privilege Admin Editor Viewer
View dashboards & reports ✓ ✓ ✓
AI chat & card insights ✓ ✓ ✓
Author & edit dashboards, reports, and models ✓ ✓ —
Create and manage data sources & pipelines ✓ ✓ —
SQL editor & visual query builder ✓ ✓ —
Share dashboards & manage embeds ✓ ✓ —
Export data (PDF, PPTX, CSV, Excel, Image) ✓ ✓ —
Delete workspace content ✓ — —
Manage users, roles, licenses, compute & billing ✓ — —

Custom roles & granular permissions

Section titled “Custom roles & granular permissions”

When access requirements fall between system roles, create a Custom Role under the Roles tab (/admin/roles):

  • Name & Description: Define identity and role scope.
  • Granular Permission Matrix: Configure View / Create / Update / Delete permissions per system area (Dashboards, Reports, Models, Sources, Pipelines, Warehouse, Queries, Alerts, Data Quality, Admin).
  • Menu Visibility & Discovery: Control which sidebar items and navigation elements appear for users assigned to the role.
  • Role Safety: System roles are protected against modification or deletion, and custom roles cannot be deleted while assigned to active users.

Groups

Section titled “Groups”

The Groups tab (/admin/groups) organizes members into logical teams (e.g. Finance, Marketing Analytics, Data Engineering):

  • Assign users to multiple groups.
  • Manage team-level permissions and share dashboard collections or models with entire groups simultaneously.

Workspaces

Section titled “Workspaces”

The Workspaces tab (/admin/workspaces) manages multi-workspace environments within an enterprise tenant:

  • Isolate environments (e.g. Production, Staging, Analytics Sandbox).
  • Manage workspace-level membership, quotas, and resource isolation.

Invitations

Section titled “Invitations”

The Invites tab (/admin/invites) manages team onboarding:

  • Send Invitation: Specify the recipient’s email address, company role (Member or Admin), and initial workspace role.
  • Lifecycle Tracking: Monitor pending invitations, resend expired invite emails, or revoke pending invitations.
  • Activation Flow: The invited user receives a secure tokenized link, confirms their email address, sets a secure password (minimum 8 characters with numbers/symbols), and enters the workspace.
Section titled “Related”
© 2026 DataSquares