Administrator

Grants all permissions on all scopes

Create Data Collections

Can these users create new Data Collections?

Publish to Data Collections

Can these users publish datasets to Data Collections?

Create workspaces

Can these users create their own workspaces?

Publish on workspaces

Can these users share project objects to workspaces?

Manage Feature Store

Can these users turn datasets into Feature Groups?

Create projects

Can these users create their own projects (blank project, duplication, import)?

Create projects using macros

Can these users create projects using a predefined macro?

Create projects using templates

Can these users create projects using predefined templates, samples, tutorials?

Write in root project folder

Can these users edit root project folder metadata and create projects and subfolders inside it?

Write isolated code

Can these users run local code (Python, R) which runs with impersonation isolation, through the User Isolation Framework?

Write unisolated code

Can these users run local code (Python, R) which runs without impersonation isolation?. Hostile users with this permission may circumvent the permissions system. Can these users run local code (Python, R) which runs as DSS service user? Hostile users with this permission may circumvent the permissions system.

Create active Web content

Can these users author Web content that is able to execute Javascript when viewed by other users? This includes webapps, Jupyter notebooks and RMarkdown reports

Manage all code envs

Can these users manage all code envs?

Create code envs

Can these users create new code envs?

Manage all clusters

Can these users manage all clusters?

Create clusters

Can these users create new clusters?

Manage all Code Studio templates

Can these users manage all Code Studio templates?

Create Code Studio templates

Can these users create new Code Studio templates?

Develop plugins

Can these users create and edit development plugins? Hostile users with this permission may circumvent the permissions system.

Edit lib folders

Can these users edit the global Python & R libraries and the static web resources in the DSS instance? Hostile users with this permission may circumvent the permissions system.

Create personal connections

Can these users create personal connections? Does not include FS connections

View indexed Hive connections

Can these users view indexed Hive connections in the catalog?

Manage user-defined meanings

Can these users create/delete global UDMs?

Create published API services

Can these users create a published API service?

Create published projects

Can these users create a published project?

Data Collections

Workspaces

Feature Store

Projects creation

Code execution

Code envs & Dynamic clusters & Code Studio templates

Advanced permissions