Here is a list of the predefined roles that exist in the Cognos namespace. It is a good idea to base your security architecture around these default values, especially when dealing with multiple environments.
| Consumers | Members can read and execute public content, such as reports |
| Query Users | Members have the same access permissions as Consumers. They can also use Query Studio |
| Authors | Members have the same access permissions as Query Users. They can use Report Studio and save public content, such as reports and report outputs |
| Report Administrators | Members can administer the public content, for which they have full access. They can also use Report and Query studio |
| Server Administrators | Members can administer servers, dispatchers and jobs |
| Directory Administrators | Members can administer the contents of namespaces. In the Cognos namespace, they administer groups, accounts, contacts, distribution lists, data sources and printers |
| Metrics Administrators | Members can administer Metric packages and tasks in Cognos Connection |
| Metrics Authors | Members can create and edit scorecard applications in Metric Studio |
| Metrics Users | Members can monitor performance in Metric Studio |
| Portal Administrators | Members can administer the Cognos portlets and third party portlets in Cognos Connection. This includes importing and customizing portlets, defining portlet styles, and setting access permissions for portlets |
