FAW Security Roles for self-service analytics

D.Angle

Our organization would like to enable fully self-service analytics (data augmentation, semantic development, dashboard development, data validation).
The functional administrator role as currently defined is more of an administrative role - having nearly complete functional control over the instance apart from security.

Examples might be -

A business developer should be able to only have "data augmentation" rights or only "data validation" rights for example.
A business developer should also be able to navigate/read data augmentations/data validations without having the ability to change them (in production for example)

Similar to there being a "modeler" role for semantic layer, we would like there to be more fine-grain control to give users access to specific capabilities - particularly around data augmentation and data validation without providing full access to reporting/data configuration, upgrades, features, connections and so forth as is required today.