Role

Group authorization objects together

In the Navigator panel select Security folder and expand it, then select the Roles folder and New Role.

Give a name, add other authorization objects, and Deploy.

SQL privileges

Grant access to base SQL objects in the database (tables and schemas for example)

In role definition go to the SQL Privileges tab click on Add select object by name, select desired SQL rights (SELECT, INSERT, and so on).

Remember to give SELECT to _SYS_BI and _SYS_REPO, and execute to REPOSITORY_REST.

Analytic privilege

Grant access to specific values returned by analytic models (attribute, analytic or calculation views)

In the Quick Launch panel under the Analytic Privileges tab and Create.

Give name, description, select concerned models, select desired attribute name(s), appropriate value(s) for restriction, and activate.

Remember...