This article describes the [permissions](/docs/settings/identity-access-management/permissions) needed to use the [Decision Hub](/docs/analytics).

To set the permissions, you need to create a user role or edit an existing one and open the Permissions matrix. In the matrix, the permissions are collected into groups. Some of these groups can be expanded to set more granular permissions.

## How to read this list

In this article, each heading describes an action. The permissions for that action are described in the form of breadcrumbs.

**For example**, if the required permissions are:
- **Profiles** > **Client list**: `read`
- **Search engine**: `create`, `edit`

The permission matrix needs to look like this:
<figure><img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/permissions-example.png" class="large" alt="Permissions example"><figcaption>Permission example, see description above figure.</figcaption></figure>

The `read` permission is not explicitly listed when any higher permission is required - the portal enables it automatically.

## I want to...

### access the Decision Hub

You need any `read` permission from the **Analytics** category.

### work with dashboards
**Analytics** (all):  
- `read` - to see dashboards
- `create` - to create dashboards
- `edit` - to update dashboards
- `delete` - to delete dashboards

### view analyses

**Analytics** > **_analysis type_**: `read`

### edit analyses

**Analytics** > **_analysis type_**: `edit`

### create analyses

**Analytics** > **_analysis type_**: `create` 

### duplicate analyses

**Analytics** > **_analysis type_**: `create`

### delete analyses
**Analytics** > **_analysis type_**: `delete`
  
### preview results

- **Analytics** > **_analysis type_**: `read`
- To select a profile context for preview:
  - **Profiles**: `read` - to search or select from the list of all profiles
  - **Analytics** > **Segmentations**: `read` - to select a profile from a segmentation

### clone an analysis to another workspace

In the source and target workspace, you need:
- **Cloning**: `create` 
- `create` and `edit` permissions for the cloned analysis type and all nested objects that will also be cloned in the process.

To learn more about cloning, see [Cloning objects to other workspaces](/docs/settings/workspace/cloning-objects).

### share segmentation results and access synchronization logs

- **Analytics > Segmentations**: `read`, `execute`, `create`, `edit`
- **Assets > Membership attribute sync**: `read`, `execute`, `create`, `edit`