|Users, Groups, and Roles|
Having a certain capability is not an alternative to meeting permission requirements. Permissions requirements and capability requirements are cumulative. For example, even if you are in the Enterprise Guide: OLAP role, you can't access data in a cube for which you don't have the Read and ReadMetadata permissions.
Use roles and permissions in conjunction with one another. You can use permissions to constrain the scope of a role. For example, to allow someone to create reports but add them to only one folder, give the person the Web Report Studio: Report Creation role, but grant them the WriteMemberMetadata permission on only that one folder.