Advanced Analytics security roles & role assignment
This document describes the various roles related to the use of the Advanced Analytics feature that are available within the beqom application, as well as the permissions related to each of these roles.
This is an note/information message.
Advanced Analytics roles are assigned by profile, except for the "super admin" role, which is granted to individual users.
Roles
The beqom application offers three levels of permissions for the use of Advanced Analytics reports:
Viewer
Designer
Super Admin
"Viewer" Role
Users who belong to a profile that has been granted the "viewer" role on Advanced Analytics reports can perform the following actions on individual report:
View report data according to the row-level security
Punctually modify the report view during their work, without possibility of saving those changes
Load default filters and edit the filters
Export widgets in image, CSV or XLS format, depending on the type of the widget
Granting a Profile the "Viewer" Role on a Report
To grant a profile the "viewer" role on Advanced Analytics reports, proceed as follows:
Log into beqom Admin Portal.
Open the (Undefined variable: CompoVariables_AP.Admin), and then navigate to Functional Admin > Profiles. The list of profiles available in the system is displayed.
Select the profile to which you want to grant the "viewer" role. The profile configuration panel is opened at the bottom of the profile list.
Open the "Analysis" tab.
Make sure that the profile has access to the (Undefined variable: CompoVariables_WA.Analysis) (the padlock icon in the upper-left corner of the panel should be open; if this is not the case, click the padlock icon to unlock it).
Make sure that the (Undefined variable: CompoVariables_WA.Analysis) is visible for the profile. The eye in the visibility icon should not be crossed out. If that is not the case, simply click the icon to toggle the visibility status.
In the "Modules Tree" list, under Administration > Edit Reports, check all the permissions available in the "Assign Rights" list (Create, Delete, Modify, Read, Visibility Admin).
Under Administration > Advanced Analytics Reports, check the "Read" permission available in the "Assign Rights" list.
Click the save icon located in the lower-left corner of the page.
"Designer" Role
Users who belong to a profile that has been granted the "designer" role on Advanced Analytics reports can perform the following actions on the reports:
Same rights as the "viewer" role
Full edition rights on individual reports, from the Web App interface (in the (Undefined variable: CompoVariables_WA.Analysis), under Advanced Analytics > <ReportName> > Edit), namely
Create a report
Rename a report
Clone a report
Delete a report
Add widgets to a report
Create filters
Share a report
This is an note/information message.
A number of changes to a report are automatically saved and are visible for all users who view the report.
Granting a Profile the "Designer" role
To grant a profile the "designer" role on Advanced Analytics reports, proceed as follows:
Log into beqom Admin Portal.
Open the (Undefined variable: CompoVariables_AP.Admin), and then navigate to Functional Admin > Profiles. The list of profiles available in the system is displayed.
Select the profile to which you want to grant the "viewer" role. The profile configuration panel is opened at the bottom of the profile list.
Open the "Analysis" tab.
Make sure that the profile has access to the (Undefined variable: CompoVariables_WA.Analysis) (the padlock icon in the upper-left corner of the panel should be open; if this is not the case, click the padlock icon to unlock it).
Make sure that the (Undefined variable: CompoVariables_WA.Analysis) is visible for the profile. The eye in the visibility icon should not be crossed out. If that is not the case, simply click the icon to toggle the visibility status.
In the "Modules Tree" list, under Administration > Edit Reports, check all the permissions available in the "Assign Rights" list (Create, Delete, Modify, Read, Visibility Admin).
Under Administration > Advanced Analytics Reports, check the "Read" and the "Manage" permissions available in the "Assign Rights" list.
Click the save icon located in the lower-left corner of the page.
"Super Admin" role
Users who have been granted the "super admin" role on a specific report can perform the following actions on the report:
Edit all reports in any section of the application
Modify data sources
In the "Edit Reports" page, users who have the "super admin" role can view and edit the script window for a report, and can for instance configure plugins such as Blox and JumpToDashboards
In the "Edit Reports" page, users who have the "super admin" role can see all the data of the report
In the "Edit Reports" page, users who have the "super admin" role can export full reports in image format
Granting a User the "Super Admin" Role
To grant a user the "super admin" role, proceed as follows:
Log into beqom Admin Portal.
Open the (Undefined variable: CompoVariables_AP.Admin), and then navigate to Functional Admin > Users. The list of users available in the system is displayed.
Click the row corresponding to the user to whom you want to grant the role. The user configuration panel is opened below the grid.
In the "Properties" tab, check the Set as administrator box.
Click the save icon located in the lower-left corner of the user configuration panel.
This is an attention message.
Only an application administrator can grant this role.
This is an attention message.
beqom strongly recommends that you limit the number of users to whom this permission is granted.