# Sample users, default roles, and permissions

By viewing the sample users and default roles you can get ideas about ways to define actual users and specific roles.

1. Open the PDI client and log into the repository.

   See the **Pentaho Data Integration** document for details on the Pentaho Repository.
2. Click **Tools** > **Repository** > **Explore**, then select the **Security** tab.

   ![Security tab in the Repository Explorer](https://3280820413-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fy1poGLvhSUVhf3TOysqu%2Fuploads%2Fgit-blob-348470869c0883e3a19c57b40beea3725f49191d%2FPDI_security_page2.png?alt=media)
3. Choose if you want to manage security by **Users**, **Roles**, or **System Roles**:
   * Select **Users** then highlight a user to display the user's role and a description, if any.
   * Select **Roles** then highlight a role in the **Available** list to display **Permissions** for the user's role, as defined by the checked boxes. These roles, added for your convenience, can be removed or altered based on your needs.

| Default Role     | Sample User | Permissions                                                                                                                                                                    |
| ---------------- | ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Administrator    | admin       | <ul><li>Administer Security</li><li>Schedule Content</li><li>Read Content</li><li>Publish Content</li><li>Create Content</li><li>Execute</li><li>Manage Data Sources</li></ul> |
| Power User       | suzy        | <ul><li>Schedule Content</li><li>Read Content</li><li>Publish Content</li><li>Create Content</li><li>Execute</li></ul>                                                         |
| Report Author    | tiffany     | <ul><li>Schedule Content</li><li>Publish Content</li></ul>                                                                                                                     |
| Business Analyst | pat         | <ul><li>Publish Content</li></ul>                                                                                                                                              |

Each default role and sample user comes with a standard set of permissions, which provides for a specific set of capabilities when using Pentaho tools and the Pentaho Server.

| Permissions         | Definition                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Administer Security | <p>The default Administrator role automatically conveys all operation permissions to users assigned to that role, even if the check box next to it is cleared. This includes the <strong>Read Content</strong> and <strong>Create Content</strong> permissions, which are required for accessing the Administration perspective:- Allows access to and the ability to manage all content in each perspective.</p><ul><li>Allows the ability to view and work with all user schedules in the Schedules perspective.</li></ul> |
| Schedule Content    | <ul><li>Allows the user to schedule reports and content.</li><li>Gives the user the ability to view, edit, or delete their own schedules using the Schedules perspective.</li></ul>                                                                                                                                                                                                                                                                                                                                          |
| Read Content        | <ul><li>Gives the user the ability to view content in each perspective.</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| Publish Content     | <ul><li>Allows the user to store reports or data models in the Pentaho Repository.</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Create Content      | <ul><li>Allows the user to create, import, delete, and save jobs and transformations to the repository.</li><li>Gives the user the ability to see the data sources that are used to create jobs and transformations.</li><li>When the user is also granted the Execute permission, users can export jobs and transformations, copy and paste, and save the file in a virtual file system (VFS).</li></ul>                                                                                                                    |
| Execute             | <ul><li>Allows the user to run, preview, debug, replay, verify, and schedule.</li><li>When the user is also granted the Create permission, users can export jobs and transformations, copy and paste, and save the file in a VFS.</li></ul>                                                                                                                                                                                                                                                                                  |
| Manage Data Sources | <ul><li>Allows the user to create, edit, or delete new data sources.</li><li>Gives the user the ability to see a list of repository data sources.</li></ul>                                                                                                                                                                                                                                                                                                                                                                  |

\- Select \*\*System Roles\*\* then highlight a role in the \*\*Available\*\* list to display the \*\*Permissions\*\* for the user's system role. System roles are built-in roles used to control default behaviors and permissions of the repository, handled implicitly or through system configuration, with automatic assignments.