Reference | Global group permissions

Administrator

Permission	Description
Administrator	When you select Administrator, all other permissions are automatically selected, meaning members of this group can perform any action on Dataiku. Administrators also may access any project, even without explicitly being granted access to each one.

Projects creation

Permission	Description
Create projects	Allows users to create their own projects using a blank project, project duplication or project import.
Create projects using macros	Allows users to create projects using project creation macros, which are administrator-controlled code.
Create projects using templates	Allows users to create projects using predefined templates from Dataiku samples and tutorials.
Write in root project folder	Allows users to create folders and projects in the root folder, or move them to the root.

Workspaces

Permission	Description
Create workspaces	Allows users to create their own workspaces.
Share to workspaces	Allows users to share project objects to workspaces.

Code execution

Permission	Description
Write isolated code	Allows users to write code that will run with impersonated rights. This permission is only available when User Isolation Framework is enabled. The framework is automatically managed for you when using Dataiku Cloud Stacks installation.
Write unisolated code	Allows users to run local code without impersonation isolation. Code will be executed with the UNIX privileges of the user.
Create active Web content	Allows users to author Web content, such as webapps, Jupyter notebooks and RMarkdown reports, that is able to execute JavasScript when viewed by other users.

Code envs & Dynamic clusters

Permission	Description
Manage all code envs	Allows users to create and manage code environments, including their own, those they’ve been given administrative access to, and others. If selected this will automatically also select “Create code envs.”
Create code envs	Allows users to create new code environments. Can be selected separately without giving access to manage all code envs.
Manage all clusters	Allows users to create and manage clusters, including their own, those they’ve been given administrative access to, and others. If selected this will automatically also select “Create clusters.”
Create clusters	Allows users to create new clusters. Can be selected separately without giving access to manage all clusters.

Advanced permissions

Permission	Description
Develop plugins	Allows users to create and edit development plugins. Be aware that this could allow a hostile user to circumvent the permissions system.
Edit lib folders	Allows users to edit the Python and R libraries and the static Web resources in the Dataiku instance.
Create personal connections	Allows users to create new connections to SQL, NoSQL, and cloud storage.
View indexed Hive connections	Allows users to view indexed Hive connections using the Dataiku catalog.
Manage user-defined meanings	Allows users to create instance-wide user-defined meanings, which will be accessible and usable by all projects.
Create published API services	Allows users to create an API service endpoint and publish it to a Dataiku API node through the Deployer.
Create published projects	Allows users to create and publish projects to a Dataiku Automation node through the Deployer.