Role Matrix — User Guide
Overview
Role Matrix visualises which security roles each user holds — whether assigned directly or inherited through a team — in a single interactive matrix. Use it to audit security role distribution and plan permission changes.
Prerequisites
- An active connection to a Dataverse environment
- Read access to users, teams, and security roles (
prvReadSystemUser,prvReadTeam,prvReadRole)
Getting Started
- Select Role Matrix from the sidebar
- The plugin loads users and their role assignments automatically
Interface Layout
| Area | Description |
|---|---|
| Filter bar | Search by user name, filter by business unit or role |
| Matrix grid | Users as rows, security roles as columns |
| Legend | Colour codes for assignment types |
Workflow
1. Load the Matrix
The matrix loads on plugin startup. For large environments with many users, loading may take a moment — a progress indicator shows status.
2. Read the Matrix
Each cell indicates whether a user has a particular role:
| Cell state | Meaning |
|---|---|
| ✅ Filled (dark) | Role is directly assigned to the user |
| 🔵 Filled (light) | Role is inherited via a team |
| Empty | User does not have the role |
The role names appear as column headers across the top. User names appear as row labels on the left.
3. Filter the Matrix
Use the filter bar to reduce the matrix to what matters:
| Filter | Description |
|---|---|
| Search users | Type part of a user's name or email |
| Business unit | Show only users belonging to a specific business unit |
| Role filter | Show only columns for selected roles |
Filters apply instantly — the matrix re-renders with the matching subset.
4. Inspect a User
Click a user's name (row header) to open a detail panel showing:
- Full list of directly assigned roles
- Teams the user belongs to and the roles inherited from each team
- Business unit assignment
5. Export
Click Export to Excel to download the full matrix as a spreadsheet.
- Rows: users
- Columns: security roles
- Cell value: "Direct", "Team", or blank
- A separate sheet lists business units and team memberships
Tips
| Tip | Detail |
|---|---|
| Team inheritance | A user may appear to have a role even though it is not directly assigned — always check the team column |
| Filter before exporting | Apply filters to export only the subset you need rather than the full matrix |
| Use for compliance audits | Export the matrix as evidence that user permissions conform to the principle of least privilege |
| Large environments | In environments with hundreds of users, filter by business unit first to keep the matrix manageable |
Troubleshooting
| Problem | Resolution |
|---|---|
| Loading takes a very long time | Large environments with many users and roles may take 30–60 seconds to load |
| A user is missing | Disabled users are excluded by default — they do not hold active role assignments |
| Role appears in two columns | Role names that differ only in case may appear as separate columns — this reflects the actual data |
| Export file is empty | Ensure the matrix has finished loading before clicking Export |