Lightup uses roles to control what people can see and do. Every user has an app role, and a workspace role in each workspace they've joined, providing convenient, fine-grained permissions control across your Lightup instance.

App roles

Your app role dictates what you can do at the app level. The following App roles are available:

  • App Admin grants the ability to invite users to Lightup, set their App roles, create workspaces, invite users to workspaces, and set their initial workspace role.
  • App Editor grants the ability to create workspaces but not to invite new app users to Lightup or set their app roles.
  • App Viewer grants the ability to be invited to join any workspace, but not to create workspaces.

Workspace roles

Every workspace user has one of four workspace roles: Admin, Editor, Viewer, or Observer.

  • Admins can do everything associated with creating, editing, and operationalizing metrics and monitors, including manage datasources.
  • Editors can do everything associated with creating, editing, and operationalizing metrics and monitors, except manage datasources.
  • Viewers can see everything associated with metric and monitors, and can also make some system changes for the purpose of viewing and collaborating on data quality, but cannot create or change metrics or monitors. For example, the viewer can add columns to the Metric List, the Monitor List, and the Incident List.
  • Observers can see data quality objects, but can't see anything that would reveal any data values.

Here are the permissions granted for each role (things that users with the role can do inside the relevant workspace):

Add/remove workspace usersYesNoNoNo
Set users' workspace rolesYesNoNoNo
Manage query governance policiesYesNoNoNo
Manage integrations and schedulesYesNoNoNo
Create/edit/delete/pause datasourcesYesNoNoNo
Create/edit/delete/pause metrics and monitorsYesYesNoNo
Reject incidentsYesYesNoNo
Create/edit/delete dashboard chartsYesYesNoNo
View queries executed on behalf of a workspaceYesYesYesNo
View failing records query resultsYesYesYesNo
Configure columns in list viewsYesYesYesNo
View/sort/search metrics, monitors, and incidents list viewsYesYesYesYes
View/click into dashboardsYesYesYesNo
View dashboard chartsYesYesYesYes
View objects but not data valuesNoNoNoYes
Browse Explorer tree/list viewsYesYesYesYes
View asset tabs in ExplorerYesYesYesNo.
Edit asset tabs in ExplorerYesYesNoNo