Set Discoverability & Custom Access Requests
In 6.3.4, Discoverability was expanded to include all Metric Insight Elements in addition to External Reports
The Discoverability feature allows Users to see those tiles on the Homepage that they do not have Permission to view and (optionally) submit an Access Request. Admins and privileged Power Users can then grant access via the Access Request screen.
Metric Insights supports three Processing options:
- Distributed Access Request processing entirely within Metric Insights
- Centralized Access Request processing (via a tool like SAP's GRC),
- Access Requests sent to a Webpage
This article explains:
- Selecting an Option to Process Access Requests
- Checking for User Access to Tableau
- Settting Elements to be Discoverable
- Optional Settings
- How to Process Access Requests within Metric Insights
The system will default to standard error messaging if no customization has been set up, see Provide Tile Information on Access Denied Popup
1. Select the Flow that is Followed when Access Request Button is Activated
The following System Variables must be set via Admin > System > System Variables for this Flow
- Select "Access Requests & Discoverabilty" in the Search field to narrow your options
- Set 'ACCESS_REQUEST_VIA_WEBPAGE' to 'N'
- Set 'NEW_CONTENT_IS_DISCOVERABLE' to 'Y'
- Set 'SEND_ACCESS_REQUEST_DIGEST' TO 'Y' or no requests will be sent. Note that no Notification Schedule is used for Access Request Digest; it will be sent when the next Schedule is run (this is usually Immediately)
- Commit your changes
The following System Variables must be set via Admin > System > System Variables for this Flow
- Select "Access Requests & Discoverability" in the Search field to narrow your options
- Set 'ACCESS_REQUEST_URL' to the <URL> set to process your company's Access Requests
- (Optional) Set 'ACCESS_REQUEST_URL_PASSWORD' if required
- (Optional) Set 'ACCESS_REQUEST_URL_USERNAME' if required
- Set 'ACCESS_REQUEST_VIA_WEBPAGE' to 'N'
- Set 'NEW_CONTENT_IS_DISCOVERABLE' to 'Y'
- Commit your changes
When the "Request Access" button is clicked on Homepage Tile, a request will be sent to the endpoint set via "ACCESS_REQUEST_URL", passing Access Request Group set on the Element Editors.
The following System Variables must be set via Admin > System > System Variables for this Flow
- Select "Access Requests & Discoverability" in the Search field to narrow your options
- Set 'ACCESS_REQUEST_URL' to the <webpage> set to process your company's Access Requests
- (Optional) Set 'ACCESS_REQUEST_URL_PASSWORD' if required
- (Optional) Set 'ACCESS_REQUEST_URL_USERNAME' if required
- Set 'ACCESS_REQUEST_VIA_WEBPAGE' to 'Y'
- Set 'NEW_CONTENT_IS_DISCOVERABLE' to 'Y'
- Commit your changes
NOTE: Any Custom Access Request messages or email recipients that are set on either the Element Editor or Category Editor will be ignored in this flow. When [Request Access] is selected the Request is sent directly to the Webpage (Request URL).
2. Special Check for User Access to Tableau Dashboard
This is a special check only available for Tableau External Reports that User has Permission to View in Metric Insights. It will verify that User has access to view Tableau Workbooks and Dashboards in the Tableau environment. This validation is only available when Username is passed through SAML
Open External Report Editor
- Click on edit gear to open <element> Type Editor to open the External Report Types editor
- Scroll to bottom of Editor
- Verify that Pre-verify User Access through Tableau API is set to 'Y' (Note: this option must be set up the systems engineer; you should not modify this option. Please contact [email protected] for assistance. )
3. Set Elements to be Discoverable
Access existing Elements from the Homepage via the edit icon (gear)and open the Advanced tab. Discoverability can also be set via Bulk Edit from element lists.
- Toggle Make Discoverable to Users Without Access ON to expose optional fields marked in yellow
- Additional fields are made available for optional changes
4. Optional Settings
Access Element Editors > Advanced tab
Scroll down to Content Access Section
- (Optional) Access Request Group is only used in Workflow 3 where processing is done via a company-created webpage.
- (Optional) Upload your own Homepage Tile preview image from an image on your system. This image will display on Tiles rather than the default of a blurred image.
- (Optional) If you do not upload your image, you can alter the level of Image Blur. Blurring is only available for the default image.
- (Optional) To set Custom Access Denied Message, set this toggle to "On" and see either:
- (Optional) Enter an Email address where this Access Request will be delivered. This overrides the default of sending emails to all System Admins (these Admins are enabled by "Receive Access Notifications" being set to "Y" in the User Editor.n This address can also be set at the Category level.
4.2.1. Customize Access Denied Message on the Element Editor
Note: if you do not specify a Access message at the Element Editor level, the system will check the associated Category for a message. If message is not specified there, the Standard Message will display.
Toggle the 'Use Custom Access Denied Message' to 'ON'
- You can control the Message display using the standard formatting options
- You can insert the following variables using the dropdown:
- [Element name] causes the system to substitute the Element Name in the display
- [More Info] provides a link to a list of information to assist Users
- Option exists to add hyperlink as needed
Access Content > Categories > [select a category] > Category Editor > Info tab
If Access Denied Message is NOT set at the Element level, the message set at the associated Category level will be used or all Elements it contains
- Toggle the 'Use Custom Access Denied message' to ON to open additional fields and complete as above for Element example
- See Example above
- Set alternative Access Request email address to be informed of this Access Denial. This field will over-ride the Standard option to send email to your Support Admin(s) for Access.
[6.3.4] Since not all groups need to see all Discoverable content as it is not relevant to them, we provide the ability to restrict Discoverability to certain User Groups for an entire Category.
4.3.1. Set System Variable for Restriction
Access > Admin > System > System Variables
- Set Search to "Access Requests & Discoverability" to limit grid display
- Find RESTRICT_DISCOVERABLE_CONTENT
- User Edit icon (gear) to open popup and set variable to "Y'
- Commit Changes
4.3.2. Select Groups
Access Content > Categories > Select a Category to edit
- Open Discoverability tab (this tab will not display unless System Variable is set per previous step)
- System will default to "All Groups"
- Activate "Selected Group" to open selection icon
- [+ Add Groups] to open popup
- Select Groups via check boxes and [+ Add Selected]
- Example of Group grid
5. Process Access Requests within Metric Insights
Access:
- From email sent when Access was requested or
- Via Admin Menu
Example of "Request Access" email. Request emails will be sent to either the Access Request Email if specified in Category or Element Editor, or will default to your Support Admins' email address(es) are set to "Receive Access Notifications" in their User Record.
- Activate [Process Request] directly from email
- Process Request using Controls:
- (check mark) to Grant Access and proceed to next step
- (x mark) to Reject the Request and remove from list
How to Access User Access Requests via Admin menu
Access via Admin > Users & Groups > Requests > Requests
- Process Request using Controls:
- (check mark) to Grant Access and proceed to next step
- (x mark) to Reject the Request and remove from list
5.1. Grant Access Request
Select to grant access to single element or entire category and all its elements
- Activate toggle to select whether you want to grant Access to the specific Element or to the Element's Category and its all its elements
- [Grant Access] to complete request
- Open User Editor to verify that requested Element or Category is added to the Elements tab