Users & Roles

Adding a read-only role

For read-only users you can choose specific pages they have access to (plus View test case results under Test cases). Ticking the Read-only checkbox hides the other privilege toggles.

Bulk user actions

Selecting users with the row checkboxes replaces the toolbar with bulk actions: Assign (add or remove roles on all selected users at once — every user must keep at least one role), Delete users, and Terminate sessions, which logs the selected users out immediately.

How it works

1. A visitor opens the login page and clicks "Continue as a temporary user", or navigates directly to /login/anonymous

2. A new user with a randomly generated name and the configured reader role is created automatically

3. The visitor is logged in and redirected to the dashboard

What temporary users can do

• Temporary users are assigned a reader role — they can only view data, not modify it

• They are automatically cleaned up when their session expires or when they log out

Managing temporary users

• In the admin user management view, temporary users can be viewed and deleted but not edited

• The maximum number of concurrent temporary users is configurable to prevent abuse

• The link /login/anonymous can be shared directly with external visitors — anyone with the link can access DQM without needing credentials

Dashboard

• View dashboard - Grants access to the dashboard page

• Add/edit dashboard - Allows creating, editing and deleting dashboard tiles and layout

Connections

• View connections page - Grants access to the connections page

• Add/edit connections - Allows creating, editing and deleting data source connections

Catalog

• View catalog page - Grants access to the data catalog page

• Add/edit catalog objects - Allows creating, editing and deleting catalog objects

• Add/edit glossary terms - Allows managing business glossary terms

• Add/edit business rules - Allows managing business rules

• Allow catalog imports - Allows running catalog imports from external sources

• Directories - Allows managing the catalog directory tree

• View sample data - Allows viewing the Data tab with a sample of the object's actual rows

• Refresh sample data - Allows fetching fresh sample data, including offering it as AI context

Test cases

• View test cases page - Grants access to the test cases page

• Add/edit test cases - Allows creating, editing and deleting test cases

• Add/edit test case reports - Allows managing test case reports

• Add/edit dynamic rules - Allows managing dynamic rules used to auto-generate test cases

• View test case results - Allows viewing test case run results and history

Test suites

• View test suites page - Grants access to the test suites page

• Add/edit test suites - Allows creating, editing and deleting test suites

• Add/edit directories - Allows managing the test suite directory tree

• View test suite reports - Allows viewing test suite reports

• Add/edit suite reports - Allows creating, editing and deleting test suite reports

Profiling

• View profiling page - Grants access to the profiling page

• Add/edit profiling objects - Allows managing objects to profile

• Add/edit profiling rules - Allows managing profiling rules

General

• Allow to execute - Allows running test cases, test suites and profilings

• Add/edit global variables - Allows managing global variables

• Allow exports - Allows exporting data and configurations from DQM

• Allow AI assistant - Grants access to the AI assistant (requires the assistant to be enabled in global settings). Covers both test-case generation and catalog description enrichment.

• Add/edit custom fields - Allows managing custom fields on catalog objects and other entities.

• View change history - Allows viewing audit history / change diffs on entities.

• Generate PATs - Allows the user to create and manage their own personal access tokens for the MCP server. The privilege is only shown in the role dialog while MCP is enabled on the instance. Without this privilege the user does not see the PATs tab in their profile.