You can rely less on roles and more on access control lists (ACLs) to secure Performance Analytics.
On new instances, you no longer need the pa_viewer role to view the following items. Instead,
indicator and breakdown ACLs are respected:
* Analytics Hub
* Text Analytics widgets
* KPI Details
* Breakdowns on workbench widgets
Performance Analytics widgets: In general, Performance Analytics widgets follow indicator and
breakdown ACLs.
Targets and Thresholds: On the Analytics Hub, no roles are required to create personal targets and
thresholds.
Reference:
https://docs.servicenow.com/bundle/quebec-release-notes/page/releasenotes/analytics-intelligence-reporting/performance-analytics-rn.html