Smartview ad-hoc security

Kind of a basic question, but couldn't turn up anything specific in Oracle documentation.

The ability to go into SmartView and click "Ad-hoc" on a cube -- is that tied to a role in IDCS? We have a read-only user who is a "Viewer" role and they cannot do ad-hocs in SV, only open forms and such.

If they were a "User" would they have the ability to do ad-hoc? We would manage the read-only via groups. But just want to confirm where the access of "Ad-hoc" comes from.

Thanks