Help & DocumentationControlling Access within Metric Insights Categories[Group Access] Checklist for granting Edit Access to a Category

[Group Access] Checklist for granting Edit Access to a Category

A Category may include a mix of associated elements, Datasets and/or User Maps, each which requires specific Permissions and Privileges before Group Power Users can actually edit the objects and Regular Users to View them. Categories may include:

  • Undimensioned and Dimensioned elements that may be sourced from:
    • Configurable Data Sources (SQL / Plug-in)
    • Non-Configurable Data Sources (CSV, Existing Metrics, Existing Reports, Single Existing Reports)
    • Aggregate Metric
  • Datasets sourced from Configurable or Non-Configurable Data Sources
  • User Maps sourced from Configurable or Non-Configurable Data Sources

In order to effect a Group's Edit Access to a Category, the Admin must make sure that Users within this Group have the required Privileges and Permissions. Reference the following sections covering Data Source and Dimensioned elements requirements:

  1. What permissions that are granted automatically?
  2. Permission to use configurable Data Sources used by elements, Datasets or User Maps within the Category
  3. Required Dataset-related Privileges and Permissions
  4. Privileges and Permissions required to edit elements sourced from non-configurable Data Sources and/or element access to components of Composite elements
  5. [Dimensioned Elements only] Access to the Dimension and at least one Dimension Value if any Category elements are Dimensioned

1. Automatic Conditional Permissions Granted to Group (and inherited by Group Members)

Each of these permissions is automatic, but CONDITIONAL. Permissions are dependent upon the Group or its individual users being granted additional Permissions and Privileges as described in the sections that follow:

  • Category elements: Edit Access to Power Users OR  only View Access to Regular Users
  • Datasets and User Maps in the Category: Edit Access to Power Users OR only View Access to Regular Users

NOTE: No automatic Permissions to use configurable Data Sources (SQL / Plugin) used by elements are granted to the Group members.  An Admin must grant these Permissions manually to the Group or to its individual Power Users.

Power User Members must inherit or be granted the additional Privileges and Permissions as discussed in the sections that follow.

2. Permission to use configurable Data Sources used by Elements or Datasets within the Category

For a Group member Power User to receive the ability to edit a elements and Datasets from this Category, either the Group or the individual member Power User(s) must be given Permissions to use one or more configurable Data Sources (SQL / Plugins) used by elements, Datasets and/or User Maps within the Category.

To grant Permission to a Dataset's or element's configurable Data Source (see the picture below):

  1. Access Dataset or Report / Metric Editor > Data tab
  2. In the Data Source field click the Gear icon. You are redirected to the Data Source Editor.
  3. At the top right corner of the screen click Permissions. In the opened pop-up click [+ New Group to Data Source] and select the Group from the drop-down list.

3. Dataset Privileges and Permissions

If there are Datasets and/or User Maps, as well as elements sourced from Datasets, in the Category, additional Privileges and Permissions are required by Group Members. For more details, see below:

3.1. Dataset-related Privileges

Group Power Users must have the following Privileges:

  • Create content using Datasets
  • Create Dataset

To assign these privileges to the Group:

  1. Open the Group Editor > Info tab
  2. In the Privileges section click [+ Privilege to Group]. The pop-up opens.
  3. Select required Privileges from the list

Save your selection to confirm your actions.

3.2. Category Elements Sourced from Datasets

Although Group Power User members are automatically granted Edit Access to Datasets and User Maps in the Category, they are not granted access to Datasets from which Category elements are sourced (unless those Datasets are also in the Category.  For elements sourced from other Datasets not in the Category, the Admin must grant the Group or individual Group Members at View Access to the Dataset from which Category elements' are sourced:

  1. Access the Group Editor > Datasets tab
  2. Click [+ Dataset access to Group]. The Add Dataset Access to Group pop-up opens.
  3. Choose the required Dataset from the Name field
  4. Typically set Group members can edit dataset it to 'no', since only View Access is required; at the discretion of the Admin, Edit Access may be assigned.

Save your selection to confirm your actions.

3.3. Datasets with User Map

Group Members do not automatically receive an entry in a User Map associated with a Category Dataset or with another Datasets used as a source for a Category element.

This requirement is relevant only if a User Map is applied to a Category Dataset or element sourced from a Dataset with a User Map:

Group members must have either:

  • Power User members only. Edit Access to the Dataset (inherited from the Group or granted independently), thus receiving access to all Dataset's Data
  • All members with Dataset View Access. At least one entry in any related User Map should be applied to each Group member, both Regular and Power Users

For more details refer to: Create a User Map and Apply a User Map to a Dataset.

4. Non-configurable Data Source requirements

If elemen's Datasets and/or User Maps in the Category are sourced from one or more non-configuable Data Sources, the Group or individual member Power Users must be granted the respective Privileges and/or Permissions to make it possible to edit the related object.

To learn about the nature of non-configurable Data Sources, refer to: Understanding Data Sources.

4.1. CSV file

Group or individual Power Users must have the following Privileges:

  • Create content using CSV files

To assign this privilege to a Group:

  1. Open the Group Editor > Info tab
  2. In the Privileges section click [+ Privilege to Group]. The pop-up opens.
  3. Select the required Privilege from the list

Save your selection to confirm your action.

4.2. Composite Elements and Datasets/User Maps Sourced from Non-Configurable Data Sources

Category contents may be sourced from one or more of the following Non-Configurable Data Sources; if so, associated Privileges and Permissions are required as described below for the Group or its individual members.

Existing Metrics

  • Privilege granted on the Group Editor: Create content using Existing Metrics
  • Each member of the Group must have View access to the source Metric(s) given at Group Editor > Elements tab > [+ Element access to Group].

Existing Reports:

  • Privilege granted on the Group Editor: Create content using Existing Reports
  • Group members are NOT to required to have View access to the source Report(s).  This is an exception to the source element rules.

Single Existing Report:

  • Privilege granted on the Group Editor: Create content using Single Report
  • Each member of the Group must have View access to the source Report given at Group Editor > Elements tab > [+ Element access to Group].

Aggregate Metric

  • No Privilege is required; this is automatically granted to each Power User.
  • Each member must have View Access to the source Metric from which it is aggregated.

Multi-Metrics

  • No Privilege is required.
  • May not be used as a source for Datasets or User Maps.
  • Each member of the Group must have Permission to View source elements of any Multi-Metrics and Composite elements in this Category, including Metrics that have been aggregated

5. Dimensioned Elements

If elements within the Category are dimensioned, each member of this Group must be granted access to at least one Dimension Value of the Dimensions associated with elements from the Category or to the whole Dimension.

This can be done at one of the following places:

  • User Editor > Dimensions tab > [Dimension access to User]
  • Dimension Editor > Advanced > Permissions > [New User access to Dimension]

For more details refer to: [User Access] Grant (View / Edit) Access to a Dimension

0 Comments

Add your comment

E-Mail me when someone replies to this comment