• Content.Create
  • Delegated
  • Create content
• Dashboard.Read.All
  • Delegated
  •  View all dashboards
• Dashboard.ReadWrite.All
  • Delegated
  • Read and write all dashboards
• Dataset.ReadWrite.All
  • Delegated
  • Read and write all datasets
• Group.Read
  • Delegated
  • View user's groups
• Report.ReadWrite.All
  • Delegated
  • Read and write all reports

• Requires SELECT permission on mysql.user.
• Permissions on any tables that will be documented.
• For triggers to be included, the TRIGGER privilege is required.
• For the definitions of stored procedures and functions to be included in the documentation, user must be named in the DEFINER clause for the object; or for MySQL prior to version 8, user needs SELECT permission on mysql.proc, or for MySQL version 8 (or later), user needs SHOW_ROUTINE privilege.
  • Note:  If permissions for these are not in effect, but the user has a permission (SELECT, INSERT etc.) on the object, then that object will be in the documentation but the definition section will be missing.

Examples

Setting permissions on a limited user account (to enable configuring a solution item and taking a snapshot):

GRANT SELECT ON mysql.user TO 'MyUserName'@'%';
GRANT SELECT, TRIGGER ON myschema.* TO 'MyUserName'@'%'; -- ALL tables/views

For stored procedures or functions:

 MySQL prior to version 8:

GRANT SELECT ON mysql.proc TO 'MyUserName'@'%';

MySQL version 8 (or later):

GRANT SHOW_ROUTINE ON *.* TO 'lockdownuser'@'%';

• Permissions are required to connect to the database.
• Permissions are required to access any objects that will be documented.
• For triggers to be documented, the CREATE ANY TRIGGER privilege is required.

• Requires LOGIN privilege
• Requires CONNECT privilege to the database
• Requires permissions on any objects you want to document. 
  • Note:  For triggers to be included, extra privileges on the table other than SELECT alone are required (e.g. INSERT)

Example

Setting permissions on a limited user account (to enable configuring a solution item and taking a snapshot):

ALTER ROLE myusername WITH LOGIN;
					
GRANT CONNECT ON DATABASE mydatabase TO myusername;
				
GRANT SELECT, INSERT ON ALL TABLES IN SCHEMA myschema TO myusername;

• Sysadmin permissions for the SQL Server you want to document
• Definition permissions for any object you want to document
• Non-sysadmin users must be granted View Server State permissions to view log file objects within the documentation.

• Multidimensional:
  • Read definition permission on each database object you want to document
• Tabular:
  • Administrator permission on each database object you want to document
• Azure Analysis Services
  • Azure Active Directory credentials are required

• SSIS Catalog:
  • Read and Modify permission for each project within the SSISDB you want to analyze
• SSIS Azure Data Factory:
  • See the Connect to Azure Data Factory article. 

• Folder Security Settings:
  • Minimum Predefined User Roles required:
    • My Reports
    • Content Manager
  • Minimum Tasks required for a custom User Role:
    • View Reports
    • View Folders
    • View Data Sources
    • View Models
    • Consume Reports
• Web Service Security Settings:
  • Minimum Predefined System Role required:
    • System User
    • Browser in the report tree
  • Minimum Tasks required for a custom System Role:
    • Execute Report Definitions

• You must be a part of the Server Administrator role