Knowledge Discovery Admin Security
Knowledge Discovery Admin is built using the public Knowledge Discovery API. This means that Knowledge Discovery Admin security is the same as Knowledge Discovery security.
A user who connects to Knowledge Discovery Admin from an IP address, SSL identity, or GSS Principal that does not belong to the index standard role cannot use any part of Knowledge Discovery Admin that uses the index port, or requires index permissions.
To be able to run a particular action in Knowledge Discovery Admin, a user must have permission to run the action using the Knowledge Discovery API. There is no need to secure Knowledge Discovery Admin beyond this. Knowledge Discovery Admin is simply the user interface that sits on top of the documented API.