Help & DocumentationControlling Access within Metric Insights Categories[User Access] Checklist for granting a Power User Edit Access to a Category

[User Access] Checklist for granting a Power User Edit Access to a Category

A Category may include a mix of associated elements, Datasets and/or User Maps, each of which requires specific Permissions and Privileges before the Power User can actually Edit the objects in the Category.  Categories may include:

  • Undimensioned and Dimensioned elements sourced from:
    • Configurable Data Sources (SQL / Plug-in)
    • Non-Configurable Data Sources (CSV, Existing Metrics, Existing Reports, Single Existing Reports)
    • Aggregate Metric
  • Datasets sourced from Configurable or Non-Configurable Data Sources
  • User Maps sourced from Configurable or Non-Configurable Data Sources

Privileges and Permissions Checklist

In order to effect an individual Power User's Edit Access to a Category, the Admin must make sure that the user has the related required Privileges and Permissions. Reference the following sections covering Data Source and Dimensioned elements requirements:

  1. Permissions that are are granted automatically
  2. Dataset-related Privileges and Permissions
  3. Create content Privileges and component element Permissions related to elements sourced from non-configurable Data Sources and/or composite elements:
  4. Subcategory (nested category) security logic
  5. Access to the Dimension and at least one Dimension Value if any Category elements are Dimensioned

1. Automatic Permissions

The Power User is automatically granted the following permissions:

  • Conditional Edit Access to all Category elements
  • Conditional Edit Access to Datasets and Users Maps in the Category.   (NOTE:  Automatic Permission to use Category Dataset's non-configurable Data Sources are NOT granted and must be given manually by the Admin before the Power User is able to Edit a Dataset).
  • Use of any configurable Data Sources (SQL / Plug-in) used by Category elements (other than Datasets)

NOTE: If a new element with new Data Source is added to the Category at some time after the Power User has been granted Category Edit Access, use of the new Data Source will NOT be automatically granted to the Power User.  Access to the new Data Source must be granted manually.  It is always possible to remove Category Access from the Power User and then re-grant it, thus allowing the Power User to gain use of additional Data Sources.  Another caution, however: If Category Edit Access is removed from a Power User, use of its related configurable Data Sources is NOT taken away from that Power User.)

Based on the actual contents of the Category, Power User ALSO must also inherit or be granted the additional Privileges and Permissions as noted in the sections that follow.

If the Category contains Datasets and/or User Maps or elements sourced from Datasets, additional requirements are described below

2.1. Privileges Related to Being Able to Edit Datasets and User Maps

Power User must have the following Privileges:

  • Create content using Datasets
  • Create/Edit Datasets

To assign these privileges to the Power User:

  1. Open the User Editor > Info tab
  2. In the Privileges section click [+ Privilege to User]. The pop-up opens.
  3. Select required Privileges from the list

Save your selection to confirm your actions.

To have the ability to edit a Dataset or User Map in this Category, a user must be given a Permission to use the configurable Data Source (SQL / Plugin) used by the respective Dataset.

To grant Permission to use a configurable Dataset's Data Source (see the picture below):

  1. Access Dataset Editor > Data tab
  2. In the Data Source field click the Gear icon. You are redirected to the Data Source Editor.
  3. At the top right corner of the screen click Permissions. In the opened pop-up click [+ New User to Data Source] and select the User from the drop-down list.

2.3. Category Datasets with associated User Maps

Since the Power User is granted Conditional Edit Access to Category's Datasets, once the Power User has Permission to Use the Dataset's Configurable Data Source, the Power User can see all of the Dataset's data, so no entry in the User Map is required for this Power User.

2.4. Category Elements Sourced from Datasets

If there are elements in this Category that are sourced from Datasets that are not in this Category, the Admin must grant the Power User at least View Access to the source Dataset before the Power User will be able to Edit the element.

3. Non-configurable Data Source requirements

If elements, Datasets or User Maps in the Category are sourced from one or more non-configuable Data Sources, the Power User must be granted the respective Privilege and/or source element access Permissions to make it possible to edit the related object.  The related requirements are discussed below.

To learn about the nature of Non-Configurable Data Sources, refer to: Understanding Data Sources.  

3.1. CSV file

Power User must have the following Privileges:

  • Create content using CSV files

To assign these privileges to a User:

  1. Open the User Editor > Info tab
  2. In the Privileges section click [+ Privilege to User]. The pop-up opens.
  3. Select required Privileges from the list

Save your selection to confirm your action.

3.2. Composite Elements and Datasets/User Maps Sourced from Non-Configurable Data Sources

Category contents may be sourced from one or more of the following Non-Configurable Data Sources; if so, associated Privileges and Permissions are required as described below:

Existing Metrics

  • Privilege granted on the User Editor: Create content using Existing Metrics
  • Power User must have View access to the source Metric(s) given at User Editor > Elements tab > [+ Element access to User].

Existing Reports:

  • Privilege granted on the User Editor: Create content using Existing Reports
  • Power User are not required to have View access to the source Report(s).  This is an exception to the source element rule.

Single Existing Report:

  • Privilege granted on the User Editor: Create content using Single Reports
  • Power User must have View access to the source Report given at User Editor > Elements tab > [+ Element access to User].

Aggregate Metric

  • No Privilege is required; this is automatically granted to each Power User.
  • Power User must have View Access to the source Metric from which it is aggregated.

Multi-Metrics

  • Cannot be the source for a Dataset or User Map
  • No Privilege is required.
  • The Power User must have Permission to View all ource elements of any Multi-Metrics  in this Category.

4. Subcategory (nested category) security logic

If Edit Access is granted to Power User for a Category that is "nested" (i.e., has one or more child Category), user receives automatic access to Data Sources used by elements in that Category but NOT to the Data Sources used by elements in its Child Categories.

SOLUTION: Admin must go to the User Editor > Power User tab to manually grant Permission to use Data Sources used by elements in any related Child Categories. Alertnatively, Permission may be granted on the Data Source Editor > Permissions.

5. Dimensioned Elements

If elements in the Category are dimensioned, the Power User must be granted access to at least one Dimension Value of the Dimension associated with each element from the Category or to the whole Dimension.

For more details refer to: [User Access] Grant (View / Edit) Access to a Dimension

0 Comments

Add your comment

E-Mail me when someone replies to this comment