MicroStrategy ONE
Assign Privileges to Use Migrations
This former preview feature, introduced in MicroStrategy 2021 Update 4, is out of the box starting in MicroStrategy 2021 Update 7.
Besides setting up the MicroStrategy Storage service, you must also assign the correct user privileges to perform migrations. As a best practice, we recommend diversifying persona access and granting full control over content migrations to only the Administrator persona.
Check out the following topics below to get started:
Privileges to Configure MicroStrategy Storage Service
MicroStrategy Storage Service is set up at the environment level. Therefore, it is correlated with the following privilege that allows operations on an environment level:
Administer environment grants access to manage environments in Workstation.
See MicroStrategy Storage Service for more information.
Privileges for Administrator Users
The following privileges are added by default to the Administrator user and System Administrators user group. These privileges are created during the MicroStrategy installation process.
-
Manage Package Migrations allows users to administer migration packages and perform actions to migrate objects across projects and environments, create and apply project package types, download packages from or upload packages to the MicroStrategy Storage Service, validate packages, reuse packages, and reverse migrations.
-
Create package allows users to create migration packages.
-
Bypass all object security access checks allows users to add all dependencies to the package, disregarding access checks.
If you want to configure a user to be an Administrator and that user does not belong to System Administrators user group, follow the steps for the Non-Administrator persona.
Privileges for Non-Administrator Users
Add the following privileges to users that need to create migration packages, but cannot migrate packages into the target environment and/or project.
-
Create package allows users to create object or administration packages.
-
Certify Migration Package allows users to certify or decertify migration packages.
Objects available for migration and migration types available to users are based on access rights.
-
Creating project packages is reserved for administrator personas only and is controlled by the Bypass all object security access checks privilege.
-
To add objects to a package, users must have read access to the object.
Privilege Changes in MicroStrategy 2021 Update 8
Starting in MicroStrategy 2021 Update 8, privileges granting access for migrations have been changed.
-
The Apply package privilege was renamed to Manage Package Migrations.
-
The Bypass all security access checks privilege is no longer needed to create a migration package. Create package is sufficient as long as the user has proper privileges and ACLs granted for objects that should be moved.
Privilege Assignments Based on Action Type
Environment level privileges are assigned directly to users or groups.
Project level privileges are assigned by security roles on specific projects.
Action | Required Privileges |
Create Object package Edit Object package Recreate Object package |
Create Package |
Create Administration package Edit Administration package Recreate Administration package |
Create Package (Only supported at the environment level) |
Create Project package Edit Project package Recreate Project package |
Create Package and Bypass all object security access checks |
Validate package Reverse package |
Migrations Manage Packages and Bypass all object security access checks |
Migrate package Reuse package |
Create Package and Migrations Manage Packages and Bypass all object security access checks |
Certify package |
Certify Migration Package |
Upload package | Migrations Manage Packages and Administer environment (Only supported at the environment level) |
Delete package |
If a package has been created, but the package is not migrated, Create Package is required. To delete migrated packages or uploaded packages, Migrations Manage Packages and Bypass all object security access checks are required. |
Download Object package Download Project package |
Migrations Manage Packages |
Download Administration package |
Migrations Manage Packages (Only supported at the environment level) |