Privileges and Roles

Essbase system privileges are indivisible database access types. In MaxL, privileges are grouped together to form permission-sets called roles. With the exception of create_user and create_application, privileges themselves are not grantable using MaxL; you typically grant roles, which are the equivalent of privilege levels. The scope of a role can be the system, the application, or the database.

While one privilege does not imply another, roles are hierarchical. The following table illustrates the Essbase system privileges that are contained in each MaxL system role.

Privileges and Roles	read	write	calculate	manage database	create database	start application	manage application	create/drop application	create/drop user
no access	.	.	.	.	.	.	.	.	.
read		.	.	.	.	.	.	.	.
write			.	.	.	.	.	.	.
execute				.	.	.	.	.	.
manager (database)					.	.	.	.	.
manager (application)								.	.
administrator