View sample users, default roles, and permissions

By viewing the sample user and default role examples, you can get ideas about ways to define actual users and specific roles.

Perform the following steps to view these sample users and default roles:

1. Log in to the Pentaho User Console.

2. Click Home > Administration.

   The Administration perspective appears.

3. Highlight a user in the Manage Users tab to view roles available for the user, as well as those currently defined.

   You can use the following sample users as templates for adding your users:

Sample user	Default role	Default Operation Permissions
admin	Administrator	Administer Security Schedule Content Read Content Execute Schedules Publish Content Create Content Execute Manage Data Sources
bob	Schedule Power user	Read Content Execute Schedules
pat	Business Analyst	Publish Content
suzy	Power User	Schedule Content Read Content Publish Content Create Content Execute
tiffany	Report Author	Schedule Content Publish Content

4. Select the **Manage Roles** tab to view the **Operation Permissions** for the user's role.

You can select or clear check boxes to designate specific operation permissions, as shown in the following example:

![Manage Roles tab](PUC_Admin_Manage_Roles.png)

Each default role and sample user come with a standard set of permissions, which define a specific set of capabilities when using Pentaho tools and the Pentaho Server, as described in the following table. You can alter or remove these roles. Roles can be based on need.

Operation Permission	Definition
Administer Security	The default Administrator role automatically conveys full operation permissions to users assigned to that role, even if the check box next to it is cleared. These permissions include the Read Content and Create Content permissions, which are required for accessing the Administration perspective.Selects the administration permissions for the user: Access to the Administration perspective of the User Console. Access and manage all content in the Browse Files perspective. View and work with all user schedules in the Schedules perspective. Create server block out times in the Schedules perspective.
Schedule Content	Selects the scheduling permissions for the user:- Schedule reports and content. View, edit, or delete their own schedules using the Schedules perspective.
Read Content	Selects the read content permissions for the user:- View content in the Browse Files perspective. View content through the File > Open dialog box.
Execute Schedules	Selects the execute schedules permissions for the user:- View all scheduled reports from all users. Pause and resume all scheduled reports Run scheduled reports and content if that user has access to data source material used for the reports.
Publish Content	Selects the publish content permissions for tools such as Report Designer, Schema Workbench, and Metadata Editor.- Allows client tools to store reports or data models in the Pentaho Repository. When held in conjunction with Write permission on the target folder, upload supported content types. See the Administer Pentaho Data Integration and Analytics document for details.
Create Content	Selects the create content permissions for the user:- Create, import, delete, and save reports to the repository. See the list of data sources which are used to create reports or dashboards.
Execute	Selects the read and execute transformations and jobs permission for the user.
Manage Data Sources	Selects the mange data sources permissions for the user:- Create, edit, or delete new data sources. See a list of data sources that are used to create reports or dashboards. Also includes the following capabilities when working with Analyzer Reports: Make inline model editing changes including modifying existing (base) measures. Add and edit calculated measures to the data model. Hide and show fields.Note: This operation permission does not include Metadata Editor data sources. See Pentaho Metadata Editor for details.

5. Select the **System Roles** tab to view the user's system role.

System roles are built-in roles used to control default behaviors and permissions in the User Console, handled implicitly or through system configuration, with automatic assignments. The default system role for all users is **Authenticated**. If you want to restrict permissions, the **Authenticated** role must be restricted or removed from the user.