Administering Permissions for Report Center

Objective

After completing this lesson, you will be able to assign permissions in SAP SuccessFactors Report Center.

Assignment of Permissions for Report Center

You must assign permissions to access and administer Report Center. The permissions can be broken into two separate categories: levels of access to the Report Center and levels of access to the different report types.

All users who consume, create, manage, or administer reports need permissions to access Report Center. Also, there's usually a limited group that can perform administrative access in Report Center.

Note

Only a security administrator can make RBP changes in the instance.

Summary of Report Permissions

To use reporting tools like Canvas Report, Table Report, Tiles, and Dashboard through Report Center, you must have certain permissions.

Permissions can be categorized as either providing administrative-level access or user-level access, specifically for report designers and report consumers. The following tables provide a quick overview of common permissions assigned for report administration and management purposes.

Report Center Permissions - User

Permission CategoryPermissionDescription
Reports PermissionReport CenterAccess to Report Center to create, run, and manage reports.
 Schedule ReportsAllows you to schedule reports that you own or that are shared with you and edit the existing schedule of reports.
 Run ReportAllows you to run existing reports that utilize data from all or the selected domains.
 Access Tiles from Home PageAllows you to view Tile reports from the home page.
 Analytics Tiles and DashboardsAllows you to run all or only the selected tiles and dashboards.
 Create StoryAllows you to create Story reports utilizing data from all or only the selected schemas.
Analytics PermissionFunctional PermissionCanvas DesignerAllows you to create a Canvas report. You can edit, delete, copy, share, label, and export only the reports created by you.

Report Center Permissions - Administrator

Permission CategoryPermissionDescription
Manage Dashboard / Reports PermissionManage Report CenterAllows you to access:
  • The Manage Report Center page to control the Report Center Settings.
  • The Sync Report Center Search page to manually sync the report information into the search repository.
 Share Reports to Groups and RolesAllows you to share reports with roles and groups
 View all SchedulesAllows you to view all the reports scheduled in your instance
 Schedule Reports to FTP DestinationAllows you to schedule reports to an SFTP destination
 Report AdminAllows you to access all Table reports, manage ownership of the Table reports, and restore deleted Table reports
 Story AdminAllows you access to manage all Story reports
 Analytics Tiles and DashboardsAllows you to view, create, and manage all tiles and dashboards
Analytics PermissionFunctional PermissionCanvas Designer AdminAllows you to edit, delete, copy, share, label, and export all Canvas reports in your instance

Assignment of Administrator Permissions to Report Center

To assign administration privileges to manage Report Center, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose Edit.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Manage Dashboard/Reports category in Administrator Permissions.
  6. Enable the following as necessary:
    1. Manage Report Center: Access Manage Report Center admin tool.
    2. Share Reports to Groups & Roles: Share reports with groups and roles, not only individual users.
    3. View All Schedules: View schedules owned by all users.
    4. Schedule Reports to FTP Destination: Schedule a report to be delivered by using SFTP.
  7. Choose Next to move to the Preview tab.
  8. Select Save.
The administrative privileges to manage Report Center are displayed.

Administer Report Center

As a Report Center administrator, you could need to perform limited administrative tasks. Those tasks might include syncing the Report Center Search, updating Report Center settings, and confirming reporting configurations with the check tool.

Report Center Search Synchronization

Syncing report types and Report Center Search is automatic. If a search doesn't return the expected results, an administrator can manually synchronize report information into the search repository which has been set up by using the Sync Report Center Search tool.

Note

Syncing could take some time. You can view the status of the job in the Scheduled Job Monitor tool.

The Sync Report Center Search page is displayed.

Configuration Check Tool

An administrator can run the Check Tool (in Admin Center) to help troubleshoot their Report Center configuration and other possible issues.

The Report Center Configuration Check determines if:

  • The company is assigned to a Solr cluster.
  • Report Center is using Solr for listing.
  • The Solr collection for the company is accessible.

Additional checks for reports and report configurations include, but aren't limited to, the following:

  • Availability of a User record for Story reporting, that it's properly configured, and it has a unique e-mail address.
  • Employee profile sub-domain schema is available in creating a table report.
  • HTML tags are appearing in different ad hoc report fields when the report is created by using the Performance Management subdomain schema.
  • MDF objects have auto-complete fields.
  • Permissions and settings related to MDF workflows have been set up correctly for Analytics.
  • Role-based permissions for canvas reports are enabled.
  • The MDF object used in Reporting respects role-based permissions.
The Validation tab of the Check Tool is displayed.

More information about this and other Admin Center tools may be found in the Introduction courses such as THR80 or HR800.

Manage Report Center Admin Tool

When Report Center was applied to the instance, its search functionality was automatically enabled. However, if there is a need to reset the search, it can be done from Manage Report Center.

More importantly, you can configure a global setting for how labels are displayed in Report Center with this tool. The different views available are described in the labels section.

The Manage Report Center screen is displayed.

Assignment of User Access to the Report Center

You determine who needs access to the Report Center tool, such as users who create and view reports online. After determining the users, you then assign permission.

Once you’ve determined the appropriate employees, assign the corresponding RBP permission to the Role.

To assign user access to the Report Center, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose Edit.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Reports Permission category in User Permissions.
  6. Enable the appropriate permissions:
    • Report Center: Enable access to Report Center
    • Schedule Reports: Enable a user to create and manage schedules on their reports
  7. Choose Next to move to the Preview tab.
  8. Select Save.
The Reports Permission page is displayed.

Levels of Permissions to Report Types

Each report type can have different levels of access provided to users. These levels of access within Report Center are maintained by role-based permissions. In general, you have:

Report Consumers: can run reports shared with them

Report Creators/Designers: can create reports and manage the reports they create

Report Administrators: can create and manage all reports

The following table differentiates the levels that you can permission for the different report types:

TypeConsumerCreator/DesignerAdministrator
Story XX
TableXXX
CanvasXXX
Dashboard/TileX X

Note

You do not have to permission consumer access for stories; users can automatically access stories that are shared with them if they have access to Report Center.

Assignment of Permissions to Administrator Table Reports

You can assign users the full access to all table reports with administrative permissions.

To assign permission to administer Table Reports, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Manage Dashboard/Reports category in Administrator Permissions.
  6. Enable the following as necessary:
    • Report Admin | Access All Reports: Access all table reports.
    • Report Admin | Manage Ownership: Change author of table reports.
    • Report Admin | Restore Deleted Reports: Restore deleted table reports.
  7. Choose Next to move to the Preview tab.
  8. Select Save.
The Manage Dashboards / Reports options for the Report Admin are displayed.

Assignment of Permissions to Create or Run Table Reports

You can assign users the ability to create and run different SAP SuccessFactors report types.

To assign permission to create or run a Table Report, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Report Permissions category in User Permissions.
  6. Enable the following as necessary:
    • To allow creating new reports, select Create Report and select the modules based on which Table Reports you want to create.
    • To allow running reports, Select Run Report and select the modules based on which reports you want to run.
  7. Choose Next to move to the Preview tab.
  8. Select Save.

If you select a particular domain, for example, Compensation Planning, you see compensation details data based on the RBP target population.

The Reports Permission area is displayed.

Assignment of Permissions to Administer Canvas Reports

To assign permission to administer Canvas reports, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Analytics permissions category in User Permissions.
  6. Select the appropriate Functional permissions:
    • Canvas Designer Admin: Assigns Admin permissions to the user so that they can edit, delete, copy, share, label, and export all Canvas reports

    • Detailed Reporting: Allows the user to create queries with Detailed Reporting or Advanced Reporting

    • Report Distributor: Allows the user to create report bundles for e-mail distribution

  7. Choose Next to move to the Preview tab.
  8. Select Save.
The Analytics permissions options are displayed.

Assignment of Permissions to Create or Run a Canvas Report

To assign permission to create Canvas reports, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Analytics permissions category in User Permissions.
  6. Select the appropriate Functional permissions:
    • Canvas Designer: Allows the user to create a new report

    • Detailed Reporting: Allows the user to create queries with Detailed Reporting or Advanced Reporting

  7. Navigate to the Report Permissions category in User Permissions.
  8. Select the appropriate permissions:
    • To allow the creating of new reports with certain modules, select Create Report and select the modules based on which you want to create Canvas reports.

    • To allow the running of reports, select Run Report and select the modules based on which you want to run Canvas reports.

  9. Choose Next to move to the Preview tab.
  10. Select Save.
Assigning Canvas Designer Permission

Note

Report consumers only need to be assigned the permission Run Report. No permission in the Analytics permission category needs to be assigned.

Assignment of Permissions to Administer Tiles and Dashboards

This role must be given only to administrators and report designers who build tiles and dashboards.

To assign permission to create and manage Tiles and Dashboard reports, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Manage Dashboard / Reports category in Administrator Permissions.
  6. Select the Analytics Tiles and Dashboards permissions.
  7. Choose Next to move to the Preview tab.
  8. Select Save.
The Tiles and Dashboard area of the Manage Dashboards / Reports page is displayed.

Note

All dashboards and tiles are manageable in Report Center by users with this permission, not only the dashboards and tiles they create.

Assignment of Permissions to Run Tiles and Dashboard Reports

To assign permission to run a tile or a standard dashboard, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Report Permissions category in User Permissions.
  6. To allow a user to run all or certain tiles and standard dashboards, enable Analytics Tiles and Dashboards and select the appropriate options.
  7. Choose Next to move to the Preview tab.
  8. Select Save.
The Reports Permission page of the Dashboard and Tiles report types is displayed.

Assignment of Permissions to Administer Story Reports

To assign a user as a Story Report Admin, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Manage Dashboard/Reports category in Administrator Permissions.
  6. Select the Story Admin.
  7. Choose Next to move to the Preview tab.
  8. Select Save to save the changes.
The Manage Dashboards / Reports page options are displayed.

Enablement of a User to Create Story Reports

To enable a user to create Story Reports, complete the following steps:

  1. Navigate to Manage Role Permissions.
  2. Select the appropriate role.
  3. Verify that the Permission tab is selected and choose the Edit button.
  4. Choose Next to move to the Add Permissions tab.
  5. Navigate to the Report Permissions category in User Permissions.
  6. Enable the following as necessary:
    • Enable the permission Create Story.
    • Select either All or individual schemas the role needs to access.
  7. Choose Next to move to the Preview tab.
  8. Select Save.
Create Story Report Permission highlighted.

Note

No user permissions are required to run stories that are shared with a user.

Note

Each enabled schema may require additional RBP permissions to create and run stories on that schema.

Reports Permission Matrix

The following table lists the permissions required to create and manage different reports in Report Center.

Reports Permission Matrix

 TableCanvasTileDashboardStory
NewIf Create Report Schema permission is enabled.If Canvas Designer or Canvas Designer Admin permission is enabled.If Analytics and Dashboards Admin permission is enabled.If Analytics and Dashboards Admin permission is enabled.If Create Story is enabled.
Run

If:

You're the Report Author.

(OR) Report is shared with the user.

(OR) Report Admin – Access All Reports is enabled.

(AND) corresponding Run Report Schema permission is enabled.

If:

Canvas Designer permission and you're the Report Author.

(OR) Canvas Designer Admin permission is enabled.

(OR) Report is shared with the user (AND the) corresponding Run Report Schema permission is enabled.

N/A

If:

Analytics and Dashboards Admin permission is enabled.

(OR) Dashboard is shared with the user.

If: Report Author.

(OR) Report is shared with read.

(OR) Story Admin permission is enabled.
Edit

If:

You're Report Author.

(AND) corresponding Create Report Schema permission is enabled.

If:

Canvas Designer permission and you're the Report Author.

(OR) Canvas Designer Admin permission is enabled.

If:

Analytics and Dashboards Admin permission is enabled.

(AND) Corresponding Create Report Schema permission is enabled.

If Analytics and Dashboards Admin permission is enabled.

If: Report Author.

(OR) Report is shared with Edit.

(OR) Story Admin permission is enabled.

ShareSee permission for Edit.See permission for Edit.See permission for Edit.See permission for Edit.

If: Report Author.

(OR) Report is shared with Full Access.

(OR) Story Admin permission is enabled.

Duplicate

See permissions for Edit.

(OR) Report is shared with the user.

(AND) corresponding Create Report Schema permission is enabled.

See permission for Edit.See permission for Edit.See permission for Edit.See permission for Edit.
DeleteSee permission for Edit.See permission for Edit.See permission for Edit.See permission for Edit.See permission for Edit.
ExportIf Create Report permission (AND) the report must be created either by you or shared with you.If Canvas Designer permission (AND) the report must be created either by you or shared with you.See permission for Edit.See permission for Edit.See permission for Edit.
LabelSee permission for Edit.See permission for Edit.See permission for Edit.See permission for Edit.See permission for Edit.
ScheduleSee permission for Edit.See permission for Edit.NANA

See permission for Run.

(AND) have create Report-Story permission.
Import

(show import button if user has any of these permissions)

If they do meet any of these permissions, then they can import any file.

Any Create Table Schema permission is enabled.

Canvas Designer permission is enabled.

(OR) Canvas Designer Admin permission is enabled.

If Analytics and Dashboards Admin permission is enabled.If Analytics and Dashboards Admin permission is enabled.If: Create Story is enabled.
Change AuthorReport Author (OR) Manage Ownership.Report Author (OR) Canvas Designer Admin.Report Author (OR) Analytics Tiles & Dashboards.Report Author (OR) Analytics Tiles & Dashboards.

If: Report Author.

(OR) Story Admin permission is enabled.

Summary

Permission Categories:

  • Two main types: user-level access (report consumers/designers) and administrator-level access (full control).
  • Only security administrators can modify Role-Based Permissions (RBP).

User Permissions:

  • Report Center access allows creating, running, and managing reports.
  • Schedule Reports enables scheduling and editing report schedules.
  • Run Report permits executing reports with selected data domains.

Administrator Permissions:

  • Manage Report Center controls settings and syncs search repositories.
  • Report Admin manages ownership, restores deleted reports, and accesses all table reports.
  • Story Admin and Canvas Designer Admin provide full control over respective report types.

Assignment Process:

  • Navigate to Manage Role Permissions, select a role, and enable necessary permissions.
  • Save changes to apply access levels for users or administrators.

Report Types & Access Levels:

  • Consumers can run shared reports.
  • Creators/Designers can create and manage their own reports.
  • Administrators have full control over all reports.