The table below shows what each role can do across Countly's features and dashboard sections.
There are three different user roles in Countly:
-
Users: assigned to one or more apps, with specific feature permissions granted by a global admin.
What a user can do depends on the features explicitly granted to them. Global admins can provide full CRUD access to users or partial CRUD access, for example, C and R only. - App Admin: has full access to every feature for the app(s) they are assigned to. Permissions are not granted feature-by-feature; admins have full create, view, edit, and delete access to most of the plugins.
- Global Admin: has unrestricted access across the entire Countly installation, including global settings, user management, and configuration.
The defaults shown below can be tightened or expanded per user in Management > User Management. The Permission Set Name column shows the label that appears in Countly's permission set UI when granting permissions. It often differs from the sidebar label (for example, the sidebar's Data Points is listed as Server Stats, and Drill appears as Drill Segmentation). For more details on how permissions and roles work, please review this article.
Dashboards
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Custom Dashboards | Dashboards | Full access (owned + shared) |
Full access (owned + shared) |
Full access (all) |
Only Global Admins can change the Custom Dashboard's visibility.
Analytics
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Visitor Analytics | (core) | View | View | Full access |
| Visitor Loyalty | (core) | View | View | Full access |
| Session Analytics | (core) | View | View | Full access |
| Technology | (core) | View | View | Full access |
| Geo | (core) | View | View | Full access |
| Acquisition | Sources | Full access (when granted) |
Full access | Full access |
| Page Views | Views | Full access (when granted) |
Full access | Full access |
| Heatmaps | Heatmaps | Full access (when granted) |
Full access | Full access |
| Retention | Retention with segments | Full access (when granted) |
Full access | Full access |
| Revenue | Revenue Analytics | Full access (when granted) |
Full access | Full access |
| Events | Events | Full access (when granted) |
Full access | Full access |
Engagement
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Surveys | Surveys | Full access (when granted) |
Full access | Full access |
| NPS | Surveys | Full access (when granted) |
Full access | Full access |
| Ratings | Ratings | Full access (when granted) |
Full access | Full access |
| Push Notifications | Push Notifications | Full access (when granted) |
Full access | Full access |
| Content | Content Builder | Full access (when granted) |
Full access | Full access |
| Journeys | Journeys | Full access (when granted) |
Full access | Full access |
Explore
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Visitor Profiles | User Profiles | Full access (when granted) |
Full access | Full access |
| Cohorts | Cohorts | Full access (when granted) |
Full access | Full access |
| Funnels | Funnels | Full access (when granted) |
Full access | Full access |
| Flows | Flows | Full access (when granted) |
Full access | Full access |
| Drill | Drill Segmentation | Full access (when granted) |
Full access | Full access |
| Formulas | Formulas | Full access (when granted) |
Full access | Full access |
Improve
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Crashes | Crash analytics | Full access (when granted) |
Full access | Full access |
| Performance Monitoring | Performance Monitoring | Full access (when granted) |
Full access | Full access |
| Remote Config | Remote Config | Full access (when granted) |
Full access | Full access |
| A/B Testing | A/B Testing | Full access (when granted) |
Full access | Full access |
Utilities
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Report Manager | (core) | No access | No access | Full access |
| Data Manager | Data Manager | Full access (when granted) |
Full access | Full access |
| Data Manager: Redaction | Data Manager: Redaction | Edit (when granted) |
Full access | Full access |
| Data Manager: Transformation | Data Manager: Transformation | Full access (when granted) |
Full access | Full access |
| Data Populator | Data Populator | Full access (when granted) |
Full access | Full access |
| Config Transfer | Config Transfer | Full access (when granted) |
Full access | Full access |
| Incoming Data Logs | Incoming Data Logs | Full access (when granted) |
Full access | Full access |
| SDK Manager | SDK Manager | Full access (when granted) |
Full access | Full access |
| Compliance Hub | Data Compliance Hub | Full access (when granted) |
Full access | Full access |
| Filtering Rules | Filtering Rules | Full access (when granted) |
Full access | Full access |
Management
| Feature | Permission Set Name | Users | App Admin | Global Admin |
|---|---|---|---|---|
| Users Management | (Global Admin only) | No access | No access | Full access |
| Applications | (core) | No access | View + edit on the assigned app only. | Full access |
| Preset Management | (core) | View, edit and delete owned private presets | View, edit and delete owned private presets | Full access |
| Settings | (Global Admin only) | No access | No access | Full access |
| License Manager | (Global Admin only) | No access | No access | Full access |
| Data Points | Server Stats | View | View | Full access |
| Logs | (Global Admin only) | No access | No access | Full access |
| Jobs | (Global Admin only) | No access | No access | Full access |
| Data Migration | Data Migration | Full access (when granted) |
Full access | Full access |
| Feature Management | (Global Admin only) | No access | No access | Full access |
| Email Reports | Email reports | Full access (when granted) |
Full access | Full access |
| Alerts | Alerts | Full access (when granted) |
Full access | Full access |
| Hooks | Hooks | Full access (when granted) |
Full access | Full access |
| DB Viewer | DB Viewer | Full access (when granted) |
Full access | Full access |
Note
"When granted" means a User needs the corresponding feature permission explicitly assigned by an admin.
App Admins automatically have full access to every feature for their app(s);
Global Admins have full access everywhere.