The top-level Administrator account will have all privileges activated by default. As shown in the following screenshot, this allows them to control most aspects of Analytics Dashboard and its users.
Each function in the analytics dashboard is assigned a privilege, and these are defined in blocks by User Type. For example, you could create an Administrator whose only actual Administrator function is to Edit Users.
If a user doesn’t have the Can Modify Layouts privilege and they view a Category that doesn’t have a default layout they will see the following error message.
The Can Change Own Password and Can Change Own Theme permissions are now linked to the Can Access Account permission. Users need to be able to access the Account screen, accessed by selecting the user name under the More Options at the top-right of the dashboard, to change their password and theme.
If you tick either the Can Change Own Password or Can Change Own Theme permissions in Dashboard Configuration > Users, the Can Access Account permission will be selected by default.
Similarly, if you untick the Can Access Account permission, Can Change Own Password and Can Change Own Theme will also be unticked.
The Can Access Account permission can be ticked without selecting Can Change Own Password and Can Change Own Theme. In this case, the user will only be able to amend their name and password.
Previously, in order to manage User Access, an administrator had to have Edit Categories, Edit Users, and Edit Roles privileges. With the addition of the Can Manage User Access privilege users can manage User Access, without being able to create dashboard users.
Migrations
- All users with the combination of the 3 privileges mentioned above will be migrated to the new Can Manage User Access privilege
- The same migration will also apply to Roles that currently have the 3 privileges mentioned above
However, if you have a User who has multiple Roles and one Role gives the user the Edit Categories privilege while another Role gives them the Edit Users and Edit Roles privileges, the User and Roles will not be migrated to the Can Manage User Access privilege automatically. 
