Applies to: Kyvos Reporting

Kyvos Reporting’s Access Rights page manages user access rights on Categories, Query Objects, Parameter Objects, Analytical Objects, Reports, Dashboards and Dashboard Widgets, and Connections.

End users don’t have any system privileges by default. They need to be granted access rights depending on their application access needs.

The application supports multi-level categories. A category may contain objects such as Query Objects, Parameter Objects, dashboards, etc.

Use the Access Rights page to manage user access rights on Categories, Query Objects, Parameter Objects, Reports as well as Connections.

Click Navigate > Administration > Manage Users > Access Rights to open this page.

Open

• From the Choose Object dropdown available on the top left of the page, select the object you want to assign access to. Use the search box to look for specific objects. The list of objects will be available below.

• Assignees can be selected from the center, and access rights options and details appear on the right side of the page.

At a time, you can select an object and grant access rights on the selected object to:

• All users of all organizations

• All users of the selected organizations

• All users who are assigned the selected roles

• Selected users

Access rights are: Not Set, Full, Partial, Deny, and Skip Folder

General steps

• To grant rights on a category, select the category in the Choose Object dropdown, navigate to the respective category, and select the category.

• To grant rights to an object, select the respective object type in the Choose Object dropdown, navigate to the category where the object is and select the object.

• Now, select assignees and select the required access rights.

• Click the Save button.

The application will display an alert if you navigate away to another category, object, or select another assignee without saving the changes.

Access rights on Category

Objects like Reports, Parameter Objects, Query Objects, etc., are saved in categories. Access rights for the category are:

• Not Set: If Not Set is highlighted, it means no access rights have been assigned.

• Full: Selected category and all its child categories will be listed to the user. User will be able to open the selected category and carry out any operations on any of the objects in the selected category and its child categories.

• Deny: Selected category and any of its child categories (as well as objects in it) will not be listed to the user. As a result, the user will not be able to access any of the categories (as well as objects in those categories).

• Partial: User can access the selected category. They can have Edit or Execute access rights as per the requirement. For example, you may grant only Edit access to the user on all reports but Edit and Execute access on all Query Objects. For Category, Edit and Execute will function as below –

Edit:

• Allows listing of reports

  • Allows creating new reports at the folder level

  • Allows editing and saving of all reports inside this category

Execute:

• Allows listing of reports

  • Allows all access for running reports and scheduling reports, including their sub-categories

• Skip Folder: None has been renamed as Skip Folder. In this case, inherited access of the parent applies, so generally, skip folder access is not given at the top level, but in case it is given at every level, then all the organizations will inherit partial access with no grants given.

Access for All Published Objects

• View Published Outputs: When this access is allowed from the UI, it will inherently allow access for all its subactions

• Save Published Outputs: Gives access to save published outputs

Access rights on Reports

These are the rights to carry out report operations on the selected report.

• Not Set: If Not Set is highlighted, it means no access rights have been assigned.

• Full: User will be able to carry out all the report operations on the selected report.

• Deny: Selected report will not be listed for the user. User will not be able to carry out any operation on the selected report.

• Partial: User will be able to carry out report operations as per the selected (Edit and Execute) on the selected report.

• Include associated objects: when checked under Reports, enables execute right for all objects associated with that report.

Access rights on Query Object / Parameter Object

• Not Set: If Not Set is highlighted, it means no access rights have been assigned.

• Full: User will be able to carry out all operations on these Objects.

• Deny: User will not be able to carry out any operation on the Objects.

• Partial: Partial rights for these objects are: Edit and Execute.

  • Edit: The Object will be listed to the user. The user will be able to open and edit these objects. The user would be able to use the create, copy, and cut features with these objects. To carry out these operations on a category, the user should have Edit rights granted at the category level.

  • Execute: User will be able to use these objects with other associated entities. For eg, query object and analytical object can be used with reports. Operations like run and schedule are accessible through this right.

Access Rights on Connections

• Not Set: If Not Set is highlighted, it means no access rights have been assigned.

• Full: User will be able to run reports on the selected connection.

• Deny: User will not be able to run reports on the selected connection.

Note: