Users & roles

Every person who signs in has exactly one of three roles: Admin, Analyst, or Viewer.

Capability	Admin	Analyst	Viewer
View dashboards	Yes	Yes	Yes
Create/edit dashboards, panels, enrichments	Yes	Yes	—
Create/replace reference tables	Yes	—	—
Manage users, API keys, and license	Yes	—	—

See Dashboards → Access & permissions for exactly how Analyst-vs-Viewer plays out on a specific dashboard.

Adding someone

Creating a user takes a username and a role — there's no email or invite flow. A one-time temporary password is shown immediately after creation and never shown again, so it needs to be shared with the person out of band (Slack, in person, however you'd share any other credential):

Creating a user — the temporary password callout, shown once right after Create user.

Whoever signs in with that temporary password is required to set a real one of their own before doing anything else — the catalog shows Pending first login for any account that hasn't done this yet, so it's obvious at a glance who still needs to log in for the first time.

Changing or removing access

A user's role can be changed at any time from the same table — takes effect on their very next request, no need for them to sign out and back in. Two guardrails on deletion: the last remaining Admin can't be deleted or demoted (there always has to be at least one), and you can't delete your own account while signed in as it.