Access Control
Vantage uses a role-based access control (RBAC) system to manage what users can do within the platform. Permissions are defined through roles and assigned to users.
How Permissions Work
Permissions in Vantage are restrictive — by default, a user with no explicit role has full access to everything. You create roles to limit what users can do, not to grant access.
Available Permissions
| Permission | What It Controls |
|---|---|
manage_organization | View and edit organization-level settings, cross-company sharing policies |
manage_integrations | Connect, configure, and manage third-party integrations |
manage_users | Add, edit, deactivate, and delete other users |
view_dashboards | View dashboards and tile data |
edit_dashboards | Create, modify, and delete dashboards and tiles |
run_workflows | Execute existing workflows |
edit_workflows | Create, modify, and delete workflows |
manage_billing | Access billing settings, purchase tokens, manage subscriptions |
Creating Roles
- Navigate to Settings → Organization → Roles.
- Click "Add Role" or "Create Role".
- Enter a Role Name (e.g., "Dashboard Viewer", "Data Analyst", "Admin").
- Toggle each permission on or off.
- Click "Save".
Example Role Configurations
Viewer Role
- ✅
view_dashboards - ❌ Everything else
Use case: Stakeholders who need to see reports but shouldn't modify anything.
Analyst Role
- ✅
view_dashboards - ✅
edit_dashboards - ✅
run_workflows - ❌
manage_users,manage_organization,manage_billing
Use case: Data analysts who create dashboards and run workflows but don't manage the organization.
Admin Role
- ✅ All permissions
Use case: Organization administrators with full control.
Assigning Roles to Users
- Go to Settings → Organization → Users.
- Click edit on a user.
- Select a role from the Role dropdown.
- Click "Save".
Important: Changes to a role immediately affect all users assigned to that role.
Company-Level Isolation
Beyond roles, data access is controlled by company membership:
- Users belong to exactly one company
- Users can only see dashboards, data, and integrations within their company
- Cross-company visibility requires an Organization with sharing enabled