About Assigning Permissions to Artifacts, Rules, and Folders

Service Administrators can assign permissions to artifacts (forms, dashboards, infolets, reports, books, and bursting definitions), rules, and folders.

For information on assigning permissions to dimension members, see Types of Access Permissions and Assigning Access to Dimension Members.

Principles:

• Artifacts (Forms, Dashboards, Infolets, Reports, Books, and Bursting Definitions):

  • Users and Power Users can view or enter data only into forms to which they have permissions (and can work only with members to which they have permissions).

  • Service Administrators and Power Users can design artifacts.

  • Power Users can access artifacts they created or to which a Service Administrator assigned them permissions.

  • Service Administrators have Write permissions to all dimension members and to all artifacts.

• Rules:

  • Users and Power Users can see and launch only rules to which they are assigned Launch permission.

  • Rulesets inherit launch permissions from the rules included in the ruleset.

• Folders:

  • Users who are assigned permissions to a folder can access the items in that folder, unless they are assigned more specific permissions. Likewise, Users have Launch permission to the Calculation Manager rules in folders to which they are assigned permissions, unless they are assigned more specific permissions.

  • When you assign permissions to a folder, all folders under it inherit that permission.

  • If you assign specific permissions (for example, None or Write) to a folder, that permission takes precedence over its parent folder's permissions. For example, if a user has Write permission to Folder1 that contains Folder2 to which the user has None permission, the user can open Folder1, but doesn't see Folder2.

  • If you assign specific permissions (for example, Launch) to a Calculation Manager folder, that permission takes precedence over its parent folder's permissions. For example, if a user has Launch permission to RulesFolder1 that contains RulesFolder2 to which the user has No Launch permission, the user can open RulesFolder1, but doesn't see RulesFolder2.

  • If a user has None permission to a folder called Folder1 that contains a form called Form1 to which the user has Write permission, the user can see Folder1 and Form1.

  • If a user has No Launch permission to a Calculation Manager folder called RulesFolder1 that contains a rule called Rule1 to which the user has Launch permission, the user can see RulesFolder1 and Rule1.

For procedures, see Adding, Changing, and Removing Permissions to Artifacts and Folders and Adding, Changing, and Removing Permissions to Rules and Rules Folders.