In this article
Control end user access to Studio dashboards by managing data and page/widget access. Use Hierarchy Management or Custom Tables for permissions.
You can control end user access within Studio dashboards as follows:
Control access to the level of data the user can see (for example a regional manager should only have access to their own region, not other regions).
Control access to pages and widgets that the user can see (for example an executive may only see a reduced version of the report compared to a call center manager).
Using Hierarchy Management for User Permissionss
If a report uses the Hierarchy Management module to assign end user permissions, a read-only "NodeAssignments" custom data table is automatically created in the Hub that the hierarchy is attached to.
This table can then be referenced in the CDL to control the hierarchical report base of end-users.
Note
As this table is read-only, it cannot be changed to include new fields (for example for adding role-based permissions) so an additional custom table would be needed for role assignment
Using Custom Tables for User Access Permissions
If the Hierarchy Management module is not used to assign hierarchy-level based data access, or if greater flexibility is needed by for example using roles to control access to specific pages or widgets, then a custom table may be used to define user access permissions.
For example, you can create a custom table called "AccessRules", containing the username as the key field and has additional columns for role (for role-based access control) and node (to assign each end-user to a hierarchical node as their root and/or default node at login).
Note
The “AccessRules” set up assumes that each user just has one role and one node permission. Often this will be enough, however sometimes you will have a many-to-many relationship between users and node permissions, and between users and roles. In this case you will need one table for the user-node permissions relations and one for the user-role permissions.
Further configuration of end user access can be achieved using CDL. To learn more, visit: Managing User Access using CDL