Reports app permissions

Roles specify the level of access, or permissions, each user has across the Reports app.

Available roles

A role defines a user's global access across the app.

There are three roles available:

  • Report Admin can configure app settings and create reports, dashboards, and presentations
  • Report Writer can create reports, dashboards, and presentations
  • Report Reader can only view existing reports, dashboards, and presentations

Example

You are a Report Admin, and you need to administer users in your organization. Your colleagues, Cheryl and Finn, need access to Reports, but they require different levels of access.

To grant them access to Reports, you assign the following roles:

  • Cheryl Report Writer
  • Finn Report Reader

Cheryl can create reports, dashboards, and presentations in Reports while Finn can only view existing reports, dashboards, and presentations.

Subscriptions and roles

Each user license has a subscription. Subscriptions define which roles are available in the app. For more information, see Managing licenses and subscription permissions.

Roles per subscription

Roles Professional Oversight
Report Admin
Report Writer
Report Reader

 = Role available

 = Role unavailable

Actions each role can perform

Action Report Admin Report Writer Report Reader

Create groups

Create content folders

Create presentation themes

Create content tags

Create reports

Create charts

Copy report and dashboard templates

View reports

View dashboards

View presentations

View SQL information for a report

Create dashboards

Create presentations

Delete own report

Delete own dashboard or presentation

Delete all reports, dashboards, or presentations

 = Read and write access

= Read-only access

 = No access

Assign roles

In Launchpad, you can add users to a Diligent One instance and specify Reports access levels for each user.

By default, new users are not assigned access to Reports. System Admins must assign users a role before they can work with reports, dashboards, and presentations in Reports.

  1. Sign in to Launchpad (www.highbond.com).
  2. If your company uses more than one Diligent One instance in Launchpad, make sure the appropriate instance is active, or select the appropriate instance from the dropdown list.
  3. Select Platform Settings > Users.

    If you do not see Users as an option, the account you used to sign in does not have Admin privileges.

  4. In the Reports access column, specify the appropriate role for each user. Diligent One saves your changes automatically.
    Note

    The Launchpad database is not synced with the Reports app. Users must open Reports once before they can be assigned access to reports, dashboards, and presentations.

Access to Diligent One data

All access to Diligent One data is secured using Diligent One user permissions for the Strategy, Projects, or Results apps, and by explicitly granting access to reports using groups in Reports.

Your access to data in Reports is determined by:

  • your Reports role
  • your role in other Diligent One apps
  • your access level to a specific report, dashboard, or presentation
  • data availability

Your Reports role

Roles specify the level of access each user has across the Reports app. By default, users added to Launchpad do not have access to Reports.

Your role in other Diligent One apps

Reports aggregates data from other Diligent One apps, which include:

  • Strategy
  • Projects
  • Results

Your access to data in all Diligent One apps is determined by your role in each app.

Note

You must be assigned one of the following roles to access data in Reports:

Strategy Projects Results
  • Oversight Executive
  • Oversight Reviewer
  • Professional Manager
  • Professional User
  • Oversight Executive
  • Oversight Reviewer
  • Professional Manager
  • Professional User
  • Oversight Executive
  • Oversight Reviewer

Examples

You are assigned the following roles in each app:

Strategy Projects Results

Oversight Executive

Professional Manager

Professional Manager

Result You can access all available data in Reports.

You are responsible for supplying data to an external stakeholder that needs view access to reports.

Result You assign the external stakeholder the Oversight Reviewer role in Strategy, Projects, and Results. The stakeholder can only report on the limited data.

You do not have access to view issues for a particular project in Projects.

Result You are not able to access issues data for that project in Reports.

Your access level to a specific report, dashboard, or presentation

Reports, dashboards, and presentations are organized within sub folders.

Report Admins need to create one or more sub folders to make content (reports, dashboards, and presentations) available to other users.

Report Admins can create groups to grant a single level of access to users belonging to a specified group. They can also grant access on a per user basis.

Users can be granted one of the following access levels:

  • Read read-only access to content
  • Edit read and edit access to content
  • Delete edit and delete access to content

    At least one person must be assigned delete access to the sub folder

For more information, see Creating content folders in Reports.

Data availability

Reports aggregates data from other Diligent One apps, which include:

  • Strategy
  • Projects
  • Results

Only data that exists within these Diligent One apps can be reported on in Reports.

Example

You build a report using the Issues View, but you do not see any data. You know that you have the appropriate access level required to view issues data.

Result You need to add issues to the project in Projects.

Removing users or user access to Reports

The Reports app does not handle the removal of users automatically. Removing a user's access to Reports can also result in unintended consequences:

  • Any private content that the user created becomes inaccessible for everyone else.
    Note

    This can prevent other users from removing folders in Reports, as all content must be removed from a folder before you can delete the folder. To remove these folders, contact Support.

  • Users can still be assigned report broadcasts.
  • Users can still receive report broadcasts. The data that they see in the report depends on:
    • their access permissions in other Diligent One apps (see Access to HighBond data )
    • if they have been removed from Launchpad or have no access in other Diligent One apps (the report contains no data)

To completely remove a user from the Reports app, contact Support.