Skip to content

User Roles

In Qualytics, every user is assigned a role that determines their platform-level permissions. Roles control what features and actions a user can perform globally, independent of team membership.

There are three user roles: Admin, Manager, and Member. Admins have the ability to edit any user's role from the user listing.

Info

User roles control platform-level permissions. For datastore-level access, see the Team Permissions documentation.

Role Hierarchy

Roles follow a hierarchical model — higher roles include all capabilities of lower roles:

Level Role Includes
3 Admin Admin + Manager + Member
2 Manager Manager + Member
1 Member Member only

Permission Matrix

Action Member Manager Admin
Users & Teams
Manage users (create, edit, deactivate)
Manage teams (create, edit, delete)
View users and teams
Create service users
Datastores
Create source datastores
Delete source datastores
List datastores (team-scoped)
Create enrichment datastores
Delete enrichment datastores
Connections
Read connections
Create connections
Update / Delete connections
Tags & Notifications
View tags
Manage tags (create, update, delete)
View notification rules
Manage notification rules
Library
View library
Manage library
Tokens
Generate personal tokens
Generate service tokens
Generate SCIM administration tokens
Flows
Create / Edit / Delete flows
Integrations
Add / Sync integrations
Datastore Groups
Create / Edit / Delete groups
Field Status
Manage field status (with Editor team permission)
View masking audit log
Settings UI
Connections tab
Tokens tab
Security tab
Integrations tab
Status tab
Platform
View health status
Restart analytical engine
Manage global settings
Subject to team permissions

Individual Roles

For detailed descriptions of each role, see the individual pages:

  • Admin


    Full platform access — manage users, teams, datastores, connections, and all settings.

    Admin

  • Manager


    Global asset management — create datastores, manage tags, notifications, and connections.

    Manager

  • Member


    Standard access — inherits permissions from team membership, manages own tokens.

    Member