Roles
User, Roles And Permissions.
Implementing Best Practices for Peak Performance.
There is a difference between Bl application roles and Business application roles. It is not recommended to mix these roles together. The best practice is to enforce data security and governance on top of Business application roles and enforce BI permissions leveraging delivered BI application roles or creating custom BI application roles based on your organizational requirements.

Defined by what people do in the Business

Human
Resources
The staff in these roles are primarily responsible for employee recruiting, onboarding, executing strategic plans like reorg, and producing ad-hoc headcount reports for senior management. They're also responsible for collecting and maintaining information for payroll, performance reviews, employee schedules etc.

Finance &
Accounting
There are several business roles under this department like controllers responsible for overseeing the financial aspect of certain business operations, such as incoming revenue and outgoing expenses. Accounting staff are responsible for timely vendor payments, timely invoice collections, generating tax reports, processing expense reports, and most importantly performing financial period-end tasks.

Manufacturing
Operations
Depending on the type of business, operations staff is responsible for the overall manufacturing process. This can include Order processing, production, shipping of products covering the fulfillment cycle. They are also responsible to plan and maintain inventory of raw-material needed for on-demand and planned product production.

Project
Accounting
Business projects that need to be delivered and billed on according to milestones, requires continuous monitoring, risk analysis and timely billing. This business role commonly works with other department managers - such as marketing, accounting and product manager to plan and develop budget,resources and timelines.

Marketing
Staff under this department perform several functions, such design and maintain the company website, they gather customer related data, optimize content for SEO purposes, they are responsible for planning and executing company sales events and generate leads.
Defined by what people can do in Orbit

Consumer
The base-level role with permissions to run and schedule existing reports and dashboards Users granted with role will not be able to create new reports but will be able to create and save insights on top of operational reports. The insights are based on concept, operational report as a datasource and users are able to analyze the data further and bookmark run these insights on a regular basis.

Power User
This is considered a super-user role extending from permission from a consumer role, a user granted this role will be able to create reports and dashboards and share them with other users and roles in the application.

Developer
This role is considered to have permissions to all features and functions in an application extending the consumer and superuser roles. The user granted this role will be able to do customization, develop complex data models, design custom visualization, orchestrate automation flows and develop data aggregation programs.

Administrator
Stemming from the developer role, users granted this role will be able to perform certain functions that are considered admin-related tasks such as user management, datasource creation, security setups, system configurations, audit reports, etc.

Data Steward
Branching from the developer and superuser roles, users granted this role are considered data owners. They are responsible for data lineage, creating and endorsing trusted datasets and can be true business domain owners responsible for data security and governance.

Data Scientist
Users granted this role will be able to develop R and Python scripts that can invoke industry-leading AI and ML libraries to produce predictive and prescriptive models.
