Configure the permissions for metadata objects such as subject areas and its elements and front-end objects such as KPIs and decks with the ready-to-use or the custom-created duty roles.
You secure the subject areas and their elements through "Configure Object Permissions", a ready-to-use single step. See Configure Object Permissions.
For the front-end objects such as KPIs and decks, set the permissions individually for each object by adding the applicable duty role and the corresponding access. See Inspect a KPI and Inspect a Deck.