Permissions for semantic models

The Semantic Model Editor permissions model defines how a user accesses and manages semantic models. Users inherit permissions from their individual assignments, roles, and groups. By default, no access is granted unless explicitly assigned.

There are two permission levels:

• Global permissions apply across all models.

• Content-level permissions apply to specific models.

For a user to be allowed to perform a given action in Semantic Models, the user needs to be authorized simultaneously at these two levels (global and content) for that action.

Global permissions

Permissions for the Semantic Model Editor that are available to administrators for assigning to users, roles, or groups.

Important: To grant an ability to a user, you must manually assign both the global permission and corresponding content-level permission for that ability to the user. Inherited permissions do not currently satisfy validation requirements for granting an ability to a user.

Permission	Grants ability
Display SME entry point	Access the Semantic Model Editor UI
View semantic models	View accessible models
Create semantic models	Create models
Edit semantic models	Edit accessible models
Delete semantic models	Delete accessible models
Change connection	Modify accessible models connection
Share semantic models	Share accessible models
Import semantic models	Manage imported models

Content-level permissions

Permissions for individual semantic models that the owner of the model can assign to other users on the platform.

Important: To grant an ability to a user, you must manually assign both the content-level permission and corresponding global permission for that ability to the user. Inherited permissions do not currently satisfy validation requirements for granting an ability to a user.

Only users with the Share permission (and the corresponding global permissions) can assign content-level permissions to others. Users can grant only permissions they also hold at both the global and content levels.

Permission	Grants ability (if global permission also exists)
View	View the model
Edit	Edit the model
Delete	Delete the model
Change connection	Change the connection used in the model
Share	Share the model

Permission inheritance

Important: Inherited permissions do not currently satisfy validation requirements for granting an ability to the user. If the user is not manually assigned both the content-level and global permission for an ability, the ability is not granted.

The following permissions automatically grant related permissions at the same level, either the content-level or global level, to ensure consistent functionality:

Assigned permission	Also grants
Create	Share, View
Edit	View
Share	View
Import	Share, View

Example: Assigning Edit also grants View.