3809820 - SAC - Creating and Saving a Data Analyzer Without Create Permission

Users can open Data Analyzer from a shared Story and create/save a Data Analyzer insight even though the Create permission for Data Analyzer  is not enabled in their assigned role.

However, the same users cannot create a new Data Analyzer directly from the Data Analyzer start page

SAP ANALYTICS CLOUD

1. Assign a role where the "Create" permission for Data Analyzer insights is unmarked.
2. In Data Analyzer, connect to an Insight using Other datasources (imported model, Datasphere, HANA).
3. Attempt to create and save an Insight.

This behavior is by design 

The Create permission in the role is required to create a new Data Analyzer, while access from existing story content is possible with the appropriate permissions.

Also this behavior is highlighted in the official help guide: Who Can Launch Data Analyzer

For object type Data Analyzer the following permissions can be set:

• Create: Allows users to open data analyzer either by selecting Create from a Data Source or Create from an Existing Model.
• Read: Allows users to access data analyzer through an insight, story table, chart widget, or via URL parametrization. Users with only Read permission cannot Create New… from the starting page and cannot change the model through the Create menu once inside data analyzer.

• Who Can Launch Data Analyzer
• Exploring Data and Discovering Insights
• Understand Licenses, Roles, and Permissions

Data analyzer, SAC, Standard planning licence, Launch data analyzer, Story, URL, Permission, Create permission, Role , KBA , LOD-ANA-DAN , SAC Data Analyzer , How To