MicroStrategy ONE

Assign Privileges to Use Migrations

This former preview feature, introduced in MicroStrategy 2021 Update 4, is out of the box starting in MicroStrategy 2021 Update 7.

Besides setting up the MicroStrategy Storage service, you must also assign the correct user privileges to perform migrations. As a best practice, we recommend diversifying persona access and granting full control over content migrations to only the Administrator persona.

Check out the following topics below to get started:

Privileges to Configure MicroStrategy Storage Service

MicroStrategy Storage Service is set up at the environment level. Therefore, it is correlated with the following privilege that allows operations on an environment level:

Administer environment grants access to manage environments in Workstation.

See MicroStrategy Storage Service for more information.

Privileges for Administrator Users

The following privileges are added by default to the Administrator user and System Administrators user group. These privileges are created during the MicroStrategy installation process.

  1. Manage Package Migrations allows users to administer migration packages and perform actions to migrate objects across projects and environments, create and apply project package types, download packages from or upload packages to the MicroStrategy Storage Service, validate packages, reuse packages, and reverse migrations.

  2. Create package allows users to create migration packages.

  3. Bypass all object security access checks allows users to add all dependencies to the package, disregarding access checks.

If you want to configure a user to be an Administrator and that user does not belong to System Administrators user group, follow the steps for the Non-Administrator persona.

Privileges for Non-Administrator Users

Add the following privileges to users that need to create migration packages, but cannot migrate packages into the target environment and/or project.

  1. Create package allows users to create object or administration packages.

  2. Certify Migration Package allows users to certify or decertify migration packages.

Objects available for migration and migration types available to users are based on access rights.

  • Creating project packages is reserved for administrator personas only and is controlled by the Bypass all object security access checks privilege.

  • To add objects to a package, users must have read access to the object.

Privilege Changes in MicroStrategy 2021 Update 8

Starting in MicroStrategy 2021 Update 8, privileges granting access for migrations have been changed.

  1. The Apply package privilege was renamed to Manage Package Migrations.

  2. The Bypass all security access checks privilege is no longer needed to create a migration package. Create package is sufficient as long as the user has proper privileges and ACLs granted for objects that should be moved.

Privilege Assignments Based on Action Type

Environment level privileges are assigned directly to users or groups.

Project level privileges are assigned by security roles on specific projects.

Action Required Privileges

Create Object package

Edit Object package

Recreate Object package

 Create Package

Create Administration package

Edit Administration package

Recreate Administration package

 Create Package (Only supported at the environment level)

Create Project package

Edit Project package

Recreate Project package

 Create Package and Bypass all object security access checks

Validate package

Reverse package

 Migrations Manage Packages and Bypass all object security access checks

Migrate package

Reuse package

 Create Package and Migrations Manage Packages and Bypass all object security access checks

Certify package

Certify Migration Package
Upload package Migrations Manage Packages and Administer environment (Only supported at the environment level)
Delete package

If a package has been created, but the package is not migrated, Create Package is required.

To delete migrated packages or uploaded packages, Migrations Manage Packages and Bypass all object security access checks are required.

Download Object package

Download Project package

 Migrations Manage Packages

Download Administration package

Migrations Manage Packages (Only supported at the environment level)