1.GENERAL

The permissions for analysis on the Web Client can be set over 2 levels.

2. PERMISSIONS for REPORT SELECTION

2.1 Basic concept

Multiple reports can be grouped into a report group. (e.g., reports 1 and 2 belong to report group A.) A report can only be assigned to one report group.

Each user can be assigned any number of roles. (e.g., user Bettina is a member of the Sales, Warehouse, and Purchasing roles.)

Each role can be assigned to any number of report groups. (For example, the Warehouse role is assigned to the Order Analysis and Purchase Order Analysis report group.)

The user can always execute all reports to which the system finds an assignment (release).

NOTE: If additional assignments and/or locks are necessary for the above concept, please read the chapter Advanced Permissions for Report Selection .

2.2 Setting up roles

Configuration: Access Roles

In the above formula, groups can be created and managed. Users (members) and analysis groups are assigned to these groups, and report rights are assigned.

By clicking on Member , individual users can be created or added to the group:

In order for users to be able to start the report, the access method Read or Update must be selected!

By clicking on Analysis Groups you can share the reports with the group:

2.3 Setting up report groups

Configuration: Analysis Groups

NOTE: The assignment to the parent report group is only for display in the menu and has no effect on the assignment of authorizations!

1.       Create the desired report group. (see 2.3) 
2.       Under the Authorization Roles menu item, you can open the form for assigning roles. (see 2.2) 
3.       Enter the desired roles in the form. For the user to be able to launch the report, the access method Read or Update must be selected! (see 2.2)

2.4 Assigning reports to report groups

Menu: Configuration/ Analysis Design / Enterprise Design /Analysis Scheme/ Button: Edit

The analysis group can be add in the report schema card: 

2.5 Assigning roles to users

Configuration: User Setup/Access Roles (Berechtigungsrollen)

1.      Select a user or create a new user. 
2.      You can use the Access Roles button to open the form for assigning roles. 
3.      Enter the Access roles in the form. For the user to be able to launch the report, the access method "Read" or "Update" must be selected. 
4.      The user must NOT be an administrator, otherwise he will be allowed to start all reports.

3. AUTHORIZATIONS for DATA SETTINGS

3.1 Concept

Any filters can be set for data sets per user and data set.

Any NAV filters can be set for each node in the following matrix.

*) In the current version, users without a filter have the right to read all data within the database. For "No access," the filter would have to be set to an invalid value (e.g., Branch XX). However, reports are usually already restricted by the permissions for report launch. (See the chapter " Permissions for Report Selection ") This behavior will be improved in a future version.

3.2 User setup

Configuration: User Setup/Security Filter

1.       Select a user or create a new user. 
2.      Use the Security Filter button to open the security filter settings. 
3.      Enter the desired fields in the security filter form. 

4. EXTENDED PERMISSIONS for REPORT SELECTION

4.1 Detailed concept 

In addition to the basic concept, it is also possible to share a single report directly with users.
(User Andrea  was directly assigned report 3)

It's also possible to block individual users from a report, even though the user could launch the report based on their roles and report group assignments. (User Arthus was blocked from Report 2.)

It is also possible to assign a user directly to a report group. (User Bernhard was assigned directly to the Order Analysis report group.)

4.2 Assign users directly to a report or block them from a report

Configuration: User Setup/Reports

1.       Select the user and click the Reports button. 
2.       Select the desired report. 
3.       In the Reports form, enter the desired access method:
   The None access method allows you to specifically lock the report for a specific user.
   With the access methods Read and Update you can assign the report to a specific user.

4.3 Assign users directly to a analysis group

Configuration: User Setup/Analysis Groups

1.        Select the user. 
2.        Use the Analysis Groups button to open the report group assignment form. 
3.        In the form, enter the desired report group with the respective access method.  With the access methods Read and Update you can assign the report group specifically to a user.
   With the None access method, you lock the report group for the user.

5. TESTING THE REPORT SELECTION

Administrators have the option to check or view the valid report selection of users.

Simply add the string ?USER=<full username> to the end of the URL . The report selection will only display reports shared with the specified user.

Or by accessing the Web Client via the user list: