Default Roles and Permissions
A default predefined role called Analytics Administrator is provided with preset default permissions for all the analytics permissions.
To create roles and assign users to roles for analytics purposes, users need both the Analytics Administrator and the Account Owner role.
You can clone default predefined roles as a starting point for creating your own customized roles, but you should not assume the cloned roles have all of the permissions of the default predefined role. In some cases, there may be hidden permissions, so you should add or remove permissions as needed for your customized role to ensure that you get the RBAC result you need.