You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "dosubot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/02 02:57:35 UTC
Re: [D] Roles list of permissions [superset]
GitHub user dosubot[bot] edited a comment on the discussion: Roles list of permissions
<!-- Greeting -->
Hi @NgTrDunghcmut! I'm [Dosu](https://go.dosu.dev/dosubot) and I’m helping the superset team.
<!-- Answer -->
Superset doesn't maintain a static, human-readable list of permissions for each role. Instead, permissions are assigned programmatically at startup by the SupersetSecurityManager. Roles like Admin, Alpha, Gamma, and SQL Lab get their permissions based on logic in the code, using sets like `ADMIN_ONLY_PERMISSIONS` (e.g., update_roles_users, list_roles, can_update_role, all_query_access, can_grant_guest_token, can_set_embedded, can_warm_up_cache) and `ALPHA_ONLY_PERMISSIONS` (e.g., muldelete, all_database_access, all_datasource_access). There are also read-only permissions such as can_show, can_list, can_get, can_external_metadata, can_external_metadata_by_name, and can_read. You can see how this works in the [security manager code](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/security/manager.py).
If you want to view the actual permissions for roles in your Superset instance, you can check the Roles section in the Superset UI or query the relevant tables in your metadata database. For specific features, like managing User Groups, permissions such as can list/add/edit/show/delete on UserGroupModelView are required and automatically added to admin roles during implementation ([source](https://github.com/apache/superset/issues/32116)). For public dashboards with Dynamic Plugins, make sure the public role has can list on DynamicPlugin ([source](https://github.com/apache/superset/issues/33548)).
<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).*
---
Docs are dead. Just use [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-tagline&utm_term=apache%2Fsuperset).
[](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-feedback&utm_term=apache%2Fsuperset&message_id=2f3bc669-a848-43d1-87dd-d2f3c7226d63) [](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-ask-repo&utm_term=apache%2Fsuperset) [](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-share-team&utm_term=apache%2Fsuperset)
GitHub link: https://github.com/apache/superset/discussions/34787#discussioncomment-14175054
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org