Understanding Power Users

A user receives this role by being designated a "Power User" in the Add User pop-up or subsequently on the User Editor.  Each of a Power User's capabilities, managed under system-enforced rules. is described in the discussion and Steps that follow.    

IMPORTANT:  See these articles for more information about the Release 5.0's new "Security Requirements" for Power Users. The Security Requirements explained in this Overview apply only to Versions prior to 5.0

I.  A Power User receives some automatic Privileges and Permissions when his/her account is created:

Permissions

  • Create and manage MI objects: Elements, Dimensions, Categories, Targets, Measures and Event Calendars
  • Use non-configurable Data Sources:  Aggregate a Metric and External Process

Privilege:

  • Access Target View

IMPORTANT:  See this article for more information about the Release 4.0's new "creating content" Privileges for Power Users

All other Privileges and Permissions must be:

  • Inherited from Group(s) of which the Power User is a member
  • Explicitly granted to the User  

II.  A Power User can:

  • Access Menus tailored for Power Users
  • Use tiles with Edit icons or name links on the Elements LIst to access Editors of elements that may be edited by the Power User
  • View any of the un-dimensioned elements to which he/she has inherited access through their membership in a Group(s) or has been explicitly given Permission to View or Edit
  • Create a new element of any type by using

     a.   A Data Source that he/she has a Privilege or Permission to use

      b.   Any Dimension and thus be automatically given access to all Dimension Values for this element only; without having been previously been granted     access to the selected  Dimension

      c.  Data from another Metric or Report to which he/she has at least View access and at least one Dimension Value

  • Access all Views of the element, even if not explicitly granted the Privilege to see the Statistical or Projection Views
  • Automatically be designated the Technical Owner of any element that he/she creates (from scratch or by duplicating an existing element) and receive immediate Edit Access
  • Edit certain elements under the following basic conditions IF he/she has been:

       a.  Granted or inherited Edit Access Permission

       b.  If the element is Dimensioned, given Permission to view data about at least one of the related Dimension Value

       c.  Granted Permission to use the element's Data Source or the Privilege to create content using data from CSV files or other elements

       d. With Edit Access to an element, a Power User can duplicate it and be designated the Technical Owner of the new element

III.  A Power User cannot:

  • See the Technical Owner setting on an element to which he/she has Edit Access
  • See the Permissions button on an element's Editor > Advanced tab of any element to which he/she has Edit Access
  • Automatically edit an element for which he/she has been designated the Business Owner until explicit Edit Access to the Element or its Category has been granted

1. Homepage

A Power User's Homepage contains tiles for all elements:

  • To which access has been inherited via Group Membership or granted by direct assignment
  • For which he/she has Edit Access

The Power User's Homepage displays tiles containing:

  1. Edit icons on tiles for elements to which the Power User has been granted Edit Access.  When the Power User clicks the Edit icon, the element's Editor opens.
  2. No Edit icon for those elements to which the Power User only has View access

2. Power Users' Homepage Menus

In Release 5.0, a Power User sees two menu access points in the upper right of each page's blue bar:

  1. New
  2. Content
  3. Admin

2.1. The New menu

The New menu

This menu allows you to quickly access the correct Editors to create various types of new elements, and to create new Alert rules

2.2. The Content menu

The Content menu

Power Users use the Content menu to access:

  1. Elements: Opens the Elements List page containing only those elements that the Power User has Permission to edit
  2. Views: Opens the Dataset List page containing only those Views, Datasets, and User Maps that the Power User has Permission to View
  3. Categories: Opens the list page of all Categories; only contains name links to the Category Editor of those Categories to which the Power User has Edit Access
  4. Dimensions:  Opens the Dimension List page containing only those Dimensions to which the Power User has Edit Access
  5. Topics: Opens the list page of Topics and allows Power User to maintain any Topic or add a new Topic
  6. Slide Shows:  Option included ONLY if the Power User has the Privilege to create Slide Shows; if present, opens the Slide Show list page

2.3. The Admin menu

The Admin menu

Power Users use the Admin menu to access:

  1. Event Calendars: Opens the Event Calendars grid page containing a grid populated with those Event Calendars that the Power User owns, created or has Permission to enter Events for
  2. Reference Objects:  Provides access to:
    1. Measures:  Opens the list page of Measures and allows Power User to maintain any Measure or add a new Measure
    2. Targets:  Opens the Targets grid from which the Power User can Add New Target or click the Name link to open the Target Editor for any Target that the Power User owns or to which Permission to edit has been granted
  3. Datasets: Opens the Dataset page containing those Views, Datasets, and User Maps that the Power User has Permission to View or Edit

3. Edit Access to Dimensioned Elements

There are additional rules applied to Dimensioned Elements that a Power User creates, is designated as the Technical Owner or to which the Power User has been granted Edit Access:

  • A Power User may create an element and select any Dimension as the Dimensioned by setting.  NOTE: In Version 5.0 the Power User will no longer be automatically granted access to the Dimension used - this must now be Granted or Inherited before the Power User can View or Edit the newly created element.
  • A Power User given/inherited Edit Access or has been designated as the Technical Owner of a Dimensioned element has access to the Dimension and all of its Dimension Values for that element only (Versions prior to 5.0 only)
  • All Dimensioned elements to which the Power User has only View Access are subject to the same security constraints as apply to Regular Users; i.e., the Power User can only see Dimensions/Dimension Values to which he/she has been explicitly granted access

4. Elements Power User can Edit

The Elements User Can Edit grid shown above appears on the User Editor for Power User accounts only.  It contains ONLY Elements to which the Power User has Edit Access

5. 4.0 Rules for Multi-Metrics and elements sourced from Existing Metrics/Reports (Composite)

1.  When a Power User is creates a Composite Metric or Multi-Metric or Composite element sourced from an Existing Metric or Report, additional security controls apply as follows:

The Power User:

  • Must have the Privilege to "Create content using Existing Metric or Report" to create a Composite Element
  • Cannot select a Metric for inclusion in the Multi-Metric or an element to be the source for a Composite Element if he/she does not have View or Edit Access to the selected element.

2.  If an Admin grants View Access to a Multi-Metric or Composite Element to a Regular or Power User or if View Access is inherited from a Group:

Both Users MUST have:

  • At least View Access to the Component (source) element(s)
  • Permission to access at least one Dimension Value if the element or its source element(s) is/are Dimensioned

3.  If an Admin does one of the following:

  • Grants Edit Access to a Multi-Metric or Composite Element to a Power User or
  • Grants Edit Access to a Group of which the Power User is a member is inherited from the Group
  • Makes the Power User the Technical Owner of the element

The Power User MUST have all of the following before actually receiving Edit Access:

  • Been explicitly granted the Privilege to "Create content using Existing Metric or Report" to receive Edit Access to a Composite Element
  • At least View Access to the Component (source) element(s)
  • Permission to access at least one Dimension Value if the source element(s) is/are Dimensioned

RELATED KNOWN ISSUES in 4.0:

  1. Edit Access messages have not been updated to reflect this revised functionality and new content creation Privileges
  2. When View or Edit Access is granted to a Multi-Metric but no access to charted Metrics has been granted, the user sees a tile on the Homepage but, when clicked, it opens to a blank Viewer (no data charted)
  3. If a Power User tries to use an element's URL to access its Editor, an error message page is received noting that the user has no access

A solution to these issues is under design and is planned to be delivered in Rel 4.1.

6. Rules for Metrics sourced from Single Existing Report

Rules for Metrics sourced from Single Existing Report
  1. The Power User must have been explicitly granted the Privilege to "Create content using a Single Report" to be able to use this method as a Data Source
  2. Power User chooses to Data Source Single Existing Report
  3. Only those Reports to which the Power User has at least View Access can be used as a source

0 Comments

Add your comment

E-Mail me when someone replies to this comment