Roles and access – QBeeQ

Report Studio uses a two-layer access model: Sisense role and user group membership. This model gives you precise control over who can create and manage reports. You define the group in Sisense, name it in the plugin's config.js, and add only the users who should have access.

To open Report Studio, a user must:

Have either the Admin or Designer role in Sisense; and

Be a member of a designated user group configured in the plugin

Admins and Designers can be managed separately or together, depending on how your team is structured.

Before you start

Create a dedicated user group

By default, the plugin looks for a group named QBeeQ Report Studio Users

Navigate to to Admin → User Management → Groups and

Create a new user group named QBeeQ Report Studio Users

Add every Admin or Designer who needs access to the Report Studio

⚠️

Users who are not members of the authorized group will not be able to access Report Studio, even if they have the correct Sisense role.

Advanced configuration

The roles and groups that are permitted to access Report Studio can be changed by editing two properties in the plugin's config.js file.

`cfg.allowedRoles`

Controls which Sisense roles can access Report Studio. By default, this is set to ["contributor"] to allow Designers. Set it to [] to allow any role.

cfg.allowedRoles = ["contributor"]

`cfg.authorizedUserGroups`

Controls which user group membership is required. This is set to ["QBeeQ Report Studio Users"] by default.

cfg.authorizedUserGroups = ["QBeeQ Report Studio Users"];

⚠️

If you need to rename the group in Sisense, update cfg.authorizedUserGroups in config.js to match. The value must be an exact match.

Using combined properties to control access

By default, cfg.allowedRoles is set to ["contributor"] and cfg.authorizedUserGroups is set to ["QBeeQ Report Studio Users"], meaning only Designers who are members of that group can access Report Studio. Admins always have access regardless of cfg.allowedRoles.

To open access to all Admins and Designers with no group restriction, set both properties to empty arrays. To restrict access to a specific group only, leave cfg.allowedRoles empty and set cfg.authorizedUserGroups to your group name.

⚠️

Setting both properties to empty arrays ([]) removes all group restrictions. Any Admin or Designer in your Sisense instance will be able to access Report Studio.

`allowedRoles`	`authorizedUserGroups`	Who can access
`[]`	`[]`	All Admins and Designers; no group restriction
`[]`	`["QBeeQ Report Studio Users"]`	All Admins and Designers in that group
`["contributor"]`	`[]`	Designers only; no group restriction
`["contributor"]`	`["QBeeQ Report Studio Users"]`	Designers in that group only