Users & Roles

Adding a read-only role

For read-only users you can choose specific pages they have access to.

How it works

1. A visitor opens the login page and clicks "Continue as temporary user", or navigates directly to /login/anonymous

2. A new user with a randomly generated name and the configured reader role is created automatically

3. The visitor is logged in and redirected to the dashboard

What temporary users can do

• Temporary users are assigned a reader role — they can only view data, not modify it

• They are automatically cleaned up when their session expires or when they log out

Managing temporary users

• In the admin user management view, temporary users can be viewed and deleted but not edited

• The maximum number of concurrent temporary users is configurable to prevent abuse

• The link /login/anonymous can be shared directly with external visitors — anyone with the link can access DQM without needing credentials

Dashboard

• View dashboard - Grants access to the dashboard page

• Add/edit dashboard - Allows creating, editing and deleting dashboard tiles and layout

Connections

• View connections page - Grants access to the connections page

• Add/edit connections - Allows creating, editing and deleting data source connections

Catalog

• View catalog page - Grants access to the data catalog page

• Add/edit catalog objects - Allows creating, editing and deleting catalog objects

• Add/edit glossary terms - Allows managing business glossary terms

• Add/edit business rules - Allows managing business rules

• Allow catalog imports - Allows running catalog imports from external sources

• Directories - Allows managing the catalog directory tree

Test cases

• View test cases page - Grants access to the test cases page

• Add/edit test cases - Allows creating, editing and deleting test cases

• Add/edit test case reports - Allows managing test case reports

• Add/edit dynamic rules - Allows managing dynamic rules used to auto-generate test cases

• View test case results - Allows viewing test case run results and history

Test suites

• View test suites page - Grants access to the test suites page

• Add/edit test suites - Allows creating, editing and deleting test suites

• Add/edit directories - Allows managing the test suite directory tree

• View test suite reports - Allows viewing test suite reports

• Add/edit suite reports - Allows creating, editing and deleting test suite reports

Profiling

• View profiling page - Grants access to the profiling page

• Add/edit profiling objects - Allows managing objects to profile

• Add/edit profiling rules - Allows managing profiling rules

General

• Allow to execute - Allows running test cases, test suites and profilings

• Add/edit global variables - Allows managing global variables

• Allow exports - Allows exporting data and configurations from DQM

• Allow AI assistant - Grants access to the AI assistant (requires the assistant to be enabled in global settings). Covers both test-case generation and catalog description enrichment.

• Add/edit custom fields - Allows managing custom fields on catalog objects and other entities.

• Allow to view change history - Allows viewing audit history / change diffs on entities.

• Generate PATs - Allows the user to create and manage their own personal access tokens for the MCP server (only effective when MCP_ENABLED=true on the instance). Without this privilege the user does not see the PATs tab in their profile.