Cube includes three default user types that give you a starting point for controlling access to features—such as dashboards, source data, reports, and users—across your organization. Each user type defines what users can see, use, or manage, and layers with data access groups to define what each user can do in Cube. Use our out-of-the-box roles or create your own custom user types for more granular control over your team's Cube experience.
We are currently rolling out this new feature. If you don't see User Management in your Cube navigation, you'll see these updates soon!
Learn more about user management and permissions.
Admin
Admins have full access to use and manage all features and settings in Cube. This includes:
- Managing dashboards, reports, and templates
- Importing and editing source data
- Managing users and permissions
- Viewing and editing all dimensions, formulas, and tags
Use this role for system owners or team leads who need full visibility and control.
Finance
Finance users have broad access to Cube’s reporting and modeling features but limited permissions for user and system settings. This role allows members of your finance team to build and collaborate on reports, plans, and models.
They can:
- Create and manage personal reports
- Use dashboards and analysis tools
- View all dimensions, formulas, and tags
- Edit data (based on their data access group)
They can’t manage users, reports they haven’t created themselves, or change system settings.
Business
Business users are limited to exploring dashboards and running reports that have been shared with them. This role allows stakeholders to refresh reports and plans necessary for strategic decisions.
They can:
- View dashboards and reports
- Use shared reports and files
They can’t edit templates, manage dimensions, or access Cube’s administrative settings.
Detailed permissions for default user types
Feature | Admin | Finance | Business |
View shared dashboards | ✅ | ✅ | ✅ |
Manage & create dashboards | ✅ | ❌ | ❌ |
View shared reports | ✅ | ✅ | ✅ |
Manage personal reports | ✅ | ✅ | ❌ |
Manage all reports and templates | ✅ | ❌ | ❌ |
Explore data with analysis | ✅ | ✅ | ❌ |
View dimensions, formulas & tags | ✅ | ✅ | ✅ |
Manage dimensions, formulas & tags | ✅ | ✅ | ❌ |
Import and manage source data & mappings | ✅ | ✅ | ❌ |
View audit trail | ✅ | ✅ | ❌ |
View & download library files | ✅ | ✅ | ✅ |
Manage personal files | ✅ | ✅ | ❌ |
Manage all files | ✅ | ❌ | ❌ |
Use the data exporter | ✅ | ✅ | ❌ |
View users & permissions | ✅ | ✅ | ❌ |
Manage users | ✅ | ❌ | ❌ |
Manage user types and data access groups | ✅ | ❌ | ❌ |
Work with values in enabled currencies | ✅ | ✅ | ✅ |
See currencies and rates | ✅ | ✅ | ❌ |
Manage currencies and rates | ✅ | ✅ | ❌ |
Use shared tables | ✅ | ✅ | ✅ |
Manage personal tables | ✅ | ✅ | ❌ |
Manage all tables | ✅ | ✅ | ❌ |
Use Cube’s conversational AI agents | ✅ | ✅ | ✅ |
Data access groups are applied alongside a user type to control dimension and data access. For example, you could create a group of users with a Business user type who could refresh and view dashboards but not see headcount data, or a Finance user who can't publish to budgets and forecasts from last year. Learn more about data access groups.
Looking for more feature control? Configure a custom user type to create exactly the permissions your team needs.