I am confused the relation profiles between permission. According the manual, profile is a licensing-related concept. What if I grant a user who has Reader profile to Admin permission? Group permissions have higher priority?
The Reader profile will negate any permission higher than "Read dashboards". So a Reader profile with Admin permission won't be able to administrate DSS. You need at least data analyst profile for that.