Data Explorer Administration

Application roles (V9.2 angular portal) 
Identity & Access Governance\§§Auditors
Identity & Access Governance\Compliance & Security Officer
Identity Management\Identities\Administrators
Identity Management\Organizations\Administrators
Request & Fulfillment\IT Shop\Administrators
Identity Management\Business roles\Administrators

Reverse engineering:
If you search for "Menu Entry Data Explorer" in angular project you will see all the components that add this menu entry and the conditional statement on features/groups

isPersonAdmin(features)
isRoleAdmin(features)
isRoleStatistics(features)
isStructStatistics(features)
isStructAdmin(features)
isResourceAdmin(features)
isAuditor(groups)

These are resolved by: projects\qer\src\lib\admin\qer-permissions-helper.ts 
Portal_UI_PersonAdmin
Portal_UI_StructAdmin
Portal_UI_RoleAdmin
Portal_UI_ResourceAdmin
Portal_UI_StructStatistics
Portal_UI_RoleStatistics
VI_4_AUDITING_AUDITOR

The query

SELECT FullPath
	,Description
FROM AERole
WHERE UID_DialogGroup IN (
		SELECT UID_DialogGroup
		FROM DialogGroup
		WHERE UID_DialogGroup IN (
				SELECT UID_DialogGroup
				FROM DialogGroupHasFeature
				WHERE UID_DialogFeature IN (
						SELECT UID_DialogFeature
						FROM QBMFeature
						WHERE Ident_DialogFeature IN (
								'Portal_UI_PersonAdmin'
								,'Portal_UI_StructAdmin'
								,'Portal_UI_RoleAdmin'
								,'Portal_UI_ResourceAdmin'
								,'Portal_UI_StructStatistics'
								,'Portal_UI_RoleStatistics'
								)
						)
					OR GroupName = 'VI_4_AUDITING_AUDITOR'
				)
		)

Application roles (V9.2 angular portal) 
Identity & Access Governance\§§Auditors
Identity & Access Governance\Compliance & Security Officer
Identity Management\Identities\Administrators
Identity Management\Organizations\Administrators
Request & Fulfillment\IT Shop\Administrators
Identity Management\Business roles\Administrators

Reverse engineering:
If you search for "Menu Entry Data Explorer" in angular project you will see all the components that add this menu entry and the conditional statement on features/groups

isPersonAdmin(features)
isRoleAdmin(features)
isRoleStatistics(features)
isStructStatistics(features)
isStructAdmin(features)
isResourceAdmin(features)
isAuditor(groups)

These are resolved by: projects\qer\src\lib\admin\qer-permissions-helper.ts 
Portal_UI_PersonAdmin
Portal_UI_StructAdmin
Portal_UI_RoleAdmin
Portal_UI_ResourceAdmin
Portal_UI_StructStatistics
Portal_UI_RoleStatistics
VI_4_AUDITING_AUDITOR

The query

SELECT FullPath
	,Description
FROM AERole
WHERE UID_DialogGroup IN (
		SELECT UID_DialogGroup
		FROM DialogGroup
		WHERE UID_DialogGroup IN (
				SELECT UID_DialogGroup
				FROM DialogGroupHasFeature
				WHERE UID_DialogFeature IN (
						SELECT UID_DialogFeature
						FROM QBMFeature
						WHERE Ident_DialogFeature IN (
								'Portal_UI_PersonAdmin'
								,'Portal_UI_StructAdmin'
								,'Portal_UI_RoleAdmin'
								,'Portal_UI_ResourceAdmin'
								,'Portal_UI_StructStatistics'
								,'Portal_UI_RoleStatistics'
								)
						)
					OR GroupName = 'VI_4_AUDITING_AUDITOR'
				)
		)