Introduction

Purpose of the guide

This guide outlines how to implement data governance in MW analytics using RBAC and Custom Views. It also serves as a reference for applying the principle of least privilege within Moveworks Analytics.

What is data governance for MW analytics ?

Governance for analytics refers to the framework that admins can leverage to implement right access controls for all data resources.

There are three resources in analytics today:

1. Flat data dashboards (Interactions table & Feedback table)

   Using these two tables, customers can generate insights into employee issues, adoption patterns, and opportunity areas. Because they contain user details such as email and department, raw user and bot messages, and citation links, they represent one of the most sensitive resources in the system—and therefore require strict governance to ensure that only the appropriate users can access them.

2. Aggregated dashboards (User insights, Plugin insights & Ticket interception insights)

   These dashboards provide ready-made insights into user adoption as well as the usage, performance, and gaps of out-of-the-box plugins. They help customers quickly understand key trends and decide which areas to explore further. Because these dashboards are domain-agnostic and aggregate data across the entire organisation, admins may need to govern and share domain-specific views to ensure the right teams see only what’s relevant to them.

3. Custom views

   Custom Views are tailored versions of aggregated or flat table dashboards. These can be created by applying filters and removing fields on a dashboard. They provide a controlled way to expose only the insights relevant to a particular team or use case, without granting access to full dashboards or sensitive underlying raw data.

Roles and permissions

There are 4 roles governing analytics, each having their own set of permissions :

Architecture overview

Click-paths for common use cases

How do I give someone full access to all user interactions?

(For complete visibility across all domains with PII)

Who can do this?

Only Super Admins

Steps:

1. Go to the RBAC app.
2. Search for the user you want to grant access to.
3. Assign the user the Interactions Viewer role.
4. The user can now access the Interactions Table and see all interactions, including emails, IDs, prompts, responses, and citations.

How do I create an HR-specific Knowledge Base Insights view?

(Use case : HR team wants visibility only into HR-related KB performance)

Who can do this?

Bot Analytics Admin / Bot analytics user / Interactions viewer / Super admin

Steps:

1. Open Knowledge Base Insights dashboard.

2. Apply the filter: Conversation Domain = HR.

3. (Optional) Enable the toggle that allows users to open underlying interactions. This can only be done if the user has Interactions viewer role

4. Save the filtered dashboard as a Custom View.

5. Share the Custom View with the HR admin.

6. Ensure the HR admin has the Custom Views User role to access it.

   Only Bot analytics admin and Super admins can assign custom views user roles

How do I create an IT-only interactions report?

( Use case: IT wants to see only what IT issues employees are facing to plan for new workflow automations )

Who can do this?

Interactions viewer / Super admin

Steps:

1. Go to the Interactions Table.

2. Apply the filter: Conversation Domain = IT.

3. Drop columns that are not required from the view (e.g., user email, ID, department, citations)

4. Save as a Custom View.

5. Share the Custom View with the IT admin.

6. Ensure they have the Custom Views User role.

   Only Bot analytics admin and Super admins can assign custom views user roles

How do I share all interactions to a user except the ones where sensitive plugins were used ?

( Use case : Admin wants to share all user / bot utterances to an analyst to come up with a list of top issues employees face. The admin does not want analyst to have a view into interactions where “Get my payslip” plugin was used )

Who can do this?

Anyone with Interactions Viewer role

Steps:

1. Go to the Interactions Table.

2. Open the Plugins Used filter.

3. Select all plugins except “Get my payslip”.

4. Apply the filter.

5. Save this as a Custom View.

6. Share it with the intended user.

7. Ensure the user has Custom Views User role.

   Only Bot analytics admin and Super admins can assign custom views user role

How do I allow users to view underlying interactions from a dashboard widget?

(Use case : Admin wants to share an HR version of KB insights dashboard to an HR employee, they want the employee to have the ability to drill down into widgets to see raw interactions )

Who can do this?

Anyone who has Interactions viewer role or Super admin.

Steps:

1. Open the dashboard (KB Insights).

2. Apply conversation domain =HR filter.

3. Enable the option “Allow users to view underlying interactions”.

4. Save as a Custom View if you want to share this capability.

5. Ensure the recipient has Custom Views User role.

   Only Bot analytics admin and Super admins can assign custom views user role