Backend Administrator Permissions

Each backend administrator can be assigned a subset of permissions to limit their access to only the areas they need. Permissions are set per-user from Settings > Curator > Backend Administrators. Some permissions are only visible when certain features or integrations are enabled on your Curator instance. So in case you don’t see the corresponding menu item on the left-hand navigation, it is because you don’t have that feature currently enabled.

Central Dispatch

Permission	Description
Central Dispatch Administrator	Full access to all Central Dispatch features for managing distributed Curator instances.
Managed Instance Cache	Manage cache operations across managed Curator instances.
Managed Instance Upgrades	Manage software upgrades across managed Curator instances.

Content

Permission	Description
Manage External Feed	Configure external data feeds.
Manage Files	Upload and manage media files and documents.
Manage Fonts	Upload and manage custom fonts.
Manage Keywords	Manage searchable keywords and tags.
Manage Loading Screens	Configure loading screen messages and visuals.
Manage Navigation	Configure menus and navigation structure.
Manage Notices	Create and manage system-wide notices shown to frontend users.
Manage Pages	Create and edit static content pages in the portal.
Manage Terms of Service	Edit and publish the Terms of Service agreement.
Manage Tutorials	Create and manage in-portal tutorial content.

Data Manager

Permission	Description
Manage Data	View, add, edit, and delete Data Manager records.
Manage Data Structure	Define and modify Data Manager schemas and field definitions.

Integration

Permission	Description
Manage API Relay	Configure the API relay for proxying requests to external APIs.
Manage Commands	Create and configure scheduled or event-driven commands.
Manage Connections	Configure connections to external services.
Manage Scripts	Create and edit integration scripts.
Run Commands	Execute commands manually.
Run Scripts	Execute integration scripts manually.

Security

Permission	Description
Manage Authentication Settings	Configure authentication methods including SSO and SAML.

Curator

Permission	Description
Manage API Keys	Create, view, and revoke API keys for external integrations.
Manage Bad Request Logging	Turn the Log bad requests switch on the Request Log on or off.
Manage Curator Settings	Edit global platform settings, including general configuration, branding, and feature toggles.
Manage Curator Updates	View and apply software updates.
Manage URL Redirects	Configure URL redirect rules within the portal.

MCP Tokens

MCP tokens need no dedicated permission. Every backend user can generate, edit, and revoke their own tokens from MCP Tokens in the username dropdown. A token can only do what its owner can do, and each MCP tool checks the owner’s permissions when it runs. The MCP tools that change content use the existing permissions: Manage Pages for pages, Manage Navigation for menu items, Manage Files for files, Manage Curator Settings for themes, and Manage API Keys for REST API keys. See MCP.

Power BI

Permission	Description
Power BI Administrator	Full access to all Power BI integration features.

Sigma

Permission	Description
Sigma Administrator	Full access to all Sigma integration features.

Tableau

Permission	Description
Manage Tableau Dashboards	Add, edit, and organize Tableau content in the portal.
Manage Tableau Settings	Configure the Tableau Server or Tableau Cloud connection.
Manage Tableau Users	Manage Tableau user provisioning and portal-to-Tableau user mappings.
Tableau Status	View the Tableau server status page.

ThoughtSpot

Permission	Description
Manage ThoughtSpot Users	Manage ThoughtSpot user provisioning and access.
ThoughtSpot Administrator	Full access to all ThoughtSpot integration features.

Translator

Permission	Description
Translator Administrator	Full access to all Translator integration features.

User Management

Permission	Description
Manage Backend Users	Create, edit, and delete backend administrator accounts and their permissions. Required to manage other admins.
Manage Frontend Users	Create, edit, and delete frontend (end-user) accounts.
Manage SAML IdP Settings	Configure SAML Identity Provider settings for single sign-on.

Granting Permissions to Other Administrators

An administrator who is not a superuser can only grant permissions they hold themselves. The Backend Administrators form lists only those permissions, and any other permission already on the account being edited stays as it is. To change a permission you do not hold, ask an administrator who holds it, or a superuser.

Superuser Accounts

Apart from the permissions on this page, a backend administrator account can be a Superuser, such as the first administrator account created when Curator was installed. A superuser can access every area of the backend, whatever permissions are checked on its account. Superuser accounts are protected. Only another superuser can edit, delete, restore, unsuspend, or reset the password of a superuser account. An administrator who is not a superuser gets this error when trying to change one, even with every permission checked, including Manage Backend Users:

You do not have permission to manage this administrator.

The Backend Administrators page does not show or change whether an account is a superuser, so checking more permissions will not clear this error. No administrator can change their own superuser status or their own permissions either. To remove a former employee’s superuser account, sign in with another superuser account and delete it from Settings > Curator > Backend Administrators. If nobody in your organization can sign in with a superuser account, contact InterWorks Support.

System

Permission	Description
Manage Backend Preferences	Manage backend preferences and settings like Locale and timezone.
Manage Mail Settings	Configure outgoing mail server settings.
Manage Mail Templates	Edit email templates used for system notifications.
View System Logs	Access system, event, and error logs.

Get Started

Self-hosted Setup

Authentication

Creating Integrations

Embedding & Using Analytics

Site Content & Design

Users & Groups

Site Administration

Upgrading & Migration

Server Management

Best Practices

Tutorials

Assets

Central Dispatch

Content

Data Manager

Integration

Security

Curator

MCP Tokens

Power BI

Sigma

Tableau

ThoughtSpot

Translator

User Management

Granting Permissions to Other Administrators

Superuser Accounts

System

​Central Dispatch

​Content

​Data Manager

​Integration

​Security

​Curator

​MCP Tokens

​Power BI

​Sigma

​Tableau

​ThoughtSpot

​Translator

​User Management

​Granting Permissions to Other Administrators

​Superuser Accounts

​System

Central Dispatch

Content

Data Manager

Integration

Security

Curator

MCP Tokens

Power BI

Sigma

Tableau

ThoughtSpot

Translator

User Management

Granting Permissions to Other Administrators

Superuser Accounts

System