Add basic roles and permissions

Related issues:

• #49

Description: What is it?

Ability for users to have different permissions. The simplest starting point would be role-based access controls, where each user can have one of a select number of roles: viewer, editor, admin

Problem: What problem does this solve?

Currently all users are able to perform any action in Lightdash. This doesn’t serve users that need to control how their Lightdash instance is maintained and supported. They need to hide dangerous actions like revoking users or deleting important dashboards.

(Optional) Why: How do we know this is a real problem and worth solving?

Previous issue and discussions: #49

Success: How will we know if we’ve solved this problem?

Lightdash admins begin assigning different permissions to their Lightdash users

Audience: Who are we building this for?

This would particularly benefit Lightdash admins adding team members that don’t need to edit any of the dashboards but need view access. This is a really common pattern for BI.

What: Roughly, what does this look like in the product?

Admins can enter the existing users list and assign roles to each user.

We would also provide useful error messages when users are not authorised to use an action. "You are not able to resize this dashboard because your user has the View-only role. Please contact your admin for help [e-mail])

Additionally we should provide a list of actions available to each role on docs.lightdash.com

Viewers: viewers can see dashboards, charts, and saved queries Editors: all viewers + can edit dashboards, charts, project settings Admins: all editors + can edit application settings, user settings

[ZeRego]

Where do we envision this screen living ? like an additional option that can be accessed from the settings menu, or as a new page ?

I think it’s a matter of having a dropdown in the existing user management page.

[TuringLovesDeathMetal]

+1 to the idea of the card expanding. Modal on top of modal sounds chaotic 😅 Then maybe having cancel as a secondary action button beside update which would bring you back to the list of users?