---
metadata:
  - name: generator
    content: Diplodoc Platform v5.63.0
alternate:
  - en/security/roles
  - ru/security/roles
  - href: en/security/roles.md
    type: text/markdown
    title: Markdown version
csp:
  - script-src:
      - https://mc.yandex.ru
    img-src:
      - https://mc.yandex.ru
    connect-src:
      - https://mc.yandex.ru
      - wss://mc.yandex.ru
    child-src:
      - 'blob:'
      - https://mc.yandex.ru
    frame-src:
      - 'blob:'
      - https://mc.yandex.ru
    frame-ancestors:
      - 'blob:'
      - https://mc.yandex.ru
canonical: en/security/roles.html
title: >-
  Managing access in DataLens On-premises: data visualization and analysis
  service
description: >-
  This section describes the roles required for specific actions, the resources
  for which you can assign a role, and the roles existing in DataLens
  On-premises.
vcsPath: en/security/roles.md
---

# DataLens On-premises roles



## Roles required to access the service {#service-roles}

To grant a user access to DataLens, [assign](./manage-users.md) them one of these roles:


<!-- source: en/_includes/datalens/roles/roles-datalens-ent-visitor.md -->
#### datalens.visitor {#datalens-visitor}

The `Visitor` (`datalens.visitor`) role grants access to DataLens. Users with this role can create workbooks and collections, except those in the DataLens root, as well as view workbooks and collections as long as they have the relevant access permissions.
<!-- endsource: en/_includes/datalens/roles/roles-datalens-ent-visitor.md -->

<!-- source: en/_includes/datalens/roles/roles-datalens-ent-creator.md -->
#### datalens.creator {#datalens-creator}

The `Creator` (`datalens.creator`) role grants access to DataLens with permissions to create workbooks and collections in the DataLens root. Users with this role can view and edit workbooks and collections created by other users as long as they have the relevant access permissions.
<!-- endsource: en/_includes/datalens/roles/roles-datalens-ent-creator.md -->

<!-- source: en/_includes/datalens/roles/roles-datalens-ent-admin.md -->
#### datalens.admin {#datalens-admin}

The `Admin` (`datalens.admin`) role grants full access to DataLens and all its workbooks and collections. Users with this role can add, edit, and delete users and assign roles to them.
<!-- endsource: en/_includes/datalens/roles/roles-datalens-ent-admin.md -->