Admin, Finance, and Business user types

Cube includes three default user types that give you a starting point for controlling access to features, such as dashboards, source data, reports, users, and AI, across your organization. Each user type defines what users can see, use, or manage, and layers with data access groups to define what each user can do in Cube. Use the default user types or create your own custom user types for more granular control.

Learn more about user management and permissions.

Admin

Admins have full access to use and manage all features and settings in Cube. This includes:

• Managing dashboards, reports, and templates
• Importing and editing source data
• Managing users and permissions
• Viewing and editing all dimensions, formulas, and tags
• Using every Cube AI feature and administering AI for the organization, including AI credits

Use this user type for system owners or team leads who need full visibility and control.

Finance

Finance users have broad access to Cube's reporting and modeling features but limited permissions for user and system settings. This user type lets members of your finance team build and collaborate on reports, plans, and models.

They can:

• Create and manage personal reports
• Use dashboards and analysis tools
• View all dimensions, formulas, and tags
• Edit data (based on their data access group)
• Use Charlie, the Planner Agent, and the Cube MCP Server, including MCP write-back

They can't manage users, reports they haven't created themselves, AI settings and credits, or system settings.

Business

Business users are limited to exploring dashboards and running reports that have been shared with them. This user type lets stakeholders refresh the reports and plans they need for strategic decisions.

They can:

• View dashboards and reports
• Use shared reports and files
• Ask Charlie questions and query Cube from external AI tools through the Cube MCP Server (read only)

They can't edit templates, manage dimensions, write data through AI, use the Planner Agent, or access Cube's administrative settings.

Detailed permissions for default user types

Note: Cube AI permissions also control who uses your company's AI credits. Everyone draws from one shared pool, and there are no per-user limits. Users with Administer AI can see company-wide usage, buy credits, and manage credit alerts. See Manage Cube AI Permissions and How AI Credits Work.

Combine user types with data access

Data access groups are applied alongside a user type to control dimension and data access. For example, you could create a group of users with a Business user type who can refresh and view dashboards but not see headcount data, or a Finance user who can't publish to last year's budgets and forecasts. Learn more about data access groups.

Looking for more feature control? Configure a custom user type to create exactly the permissions your team needs.