Objective
After completing this lesson, you will be able to assign permissions in SAP SuccessFactors Report Center.
Assignment of Permissions for Report Center
You must assign permissions to access and administer Report Center. The permissions can be broken into two separate categories: levels of access to the Report Center and levels of access to the different report types.
All users who consume, create, manage, or administer reports need permissions to access Report Center. Also, there's usually a limited group that can perform administrative access in Report Center.
Note
Only a security administrator can make RBP changes in the instance.
Summary of Report Permissions
To use reporting tools like Canvas Report, Table Report, Tiles, and Dashboard through Report Center, you must have certain permissions.
Permissions can be categorized as either providing administrative-level access or user-level access, specifically for report designers and report consumers. The following tables provide a quick overview of common permissions assigned for report administration and management purposes.
Report Center Permissions - User
| Permission Category | Permission | Description |
|---|
| Reports Permission | Report Center | Access to Report Center to create, run, and manage reports. |
| | Schedule Reports | Allows you to schedule reports that you own or that are shared with you and edit the existing schedule of reports. |
| | Run Report | Allows you to run existing reports that utilize data from all or the selected domains. |
| | Access Tiles from Home Page | Allows you to view Tile reports from the home page. |
| | Analytics Tiles and Dashboards | Allows you to run all or only the selected tiles and dashboards. |
| | Create Story | Allows you to create Story reports utilizing data from all or only the selected schemas. |
| Analytics Permission | Functional Permission→Canvas Designer | Allows you to create a Canvas report. You can edit, delete, copy, share, label, and export only the reports created by you. |
Report Center Permissions - Administrator
| Permission Category | Permission | Description |
|---|
| Manage Dashboard / Reports Permission | Manage Report Center | Allows you to access:- The Manage Report Center page to control the Report Center Settings.
- The Sync Report Center Search page to manually sync the report information into the search repository.
|
| | Share Reports to Groups and Roles | Allows you to share reports with roles and groups |
| | View all Schedules | Allows you to view all the reports scheduled in your instance |
| | Schedule Reports to FTP Destination | Allows you to schedule reports to an SFTP destination |
| | Report Admin | Allows you to access all Table reports, manage ownership of the Table reports, and restore deleted Table reports |
| | Story Admin | Allows you access to manage all Story reports |
| | Analytics Tiles and Dashboards | Allows you to view, create, and manage all tiles and dashboards |
| Analytics Permission | Functional Permission→Canvas Designer Admin | Allows you to edit, delete, copy, share, label, and export all Canvas reports in your instance |
Assignment of Administrator Permissions to Report Center
To assign administration privileges to manage Report Center, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose Edit.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Manage Dashboard/Reports category in Administrator Permissions.
- Enable the following as necessary:
- Manage Report Center: Access Manage Report Center admin tool.
- Share Reports to Groups & Roles: Share reports with groups and roles, not only individual users.
- View All Schedules: View schedules owned by all users.
- Schedule Reports to FTP Destination: Schedule a report to be delivered by using SFTP.
- Choose Next to move to the Preview tab.
- Select Save.
Administer Report Center
As a Report Center administrator, you could need to perform limited administrative tasks. Those tasks might include syncing the Report Center Search, updating Report Center settings, and confirming reporting configurations with the check tool.
Report Center Search Synchronization
Syncing report types and Report Center Search is automatic. If a search doesn't return the expected results, an administrator can manually synchronize report information into the search repository which has been set up by using the Sync Report Center Search tool.
Note
Syncing could take some time. You can view the status of the job in the Scheduled Job Monitor tool.
Configuration Check Tool
An administrator can run the Check Tool (in Admin Center) to help troubleshoot their Report Center configuration and other possible issues.
The Report Center Configuration Check determines if:
- The company is assigned to a Solr cluster.
- Report Center is using Solr for listing.
- The Solr collection for the company is accessible.
Additional checks for reports and report configurations include, but aren't limited to, the following:
- Availability of a User record for Story reporting, that it's properly configured, and it has a unique e-mail address.
- Employee profile sub-domain schema is available in creating a table report.
- HTML tags are appearing in different ad hoc report fields when the report is created by using the Performance Management subdomain schema.
- MDF objects have auto-complete fields.
- Permissions and settings related to MDF workflows have been set up correctly for Analytics.
- Role-based permissions for canvas reports are enabled.
- The MDF object used in Reporting respects role-based permissions.
More information about this and other Admin Center tools may be found in the Introduction courses such as THR80 or HR800.
Manage Report Center Admin Tool
When Report Center was applied to the instance, its search functionality was automatically enabled. However, if there is a need to reset the search, it can be done from Manage Report Center.
More importantly, you can configure a global setting for how labels are displayed in Report Center with this tool. The different views available are described in the labels section.
Assignment of User Access to the Report Center
You determine who needs access to the Report Center tool, such as users who create and view reports online. After determining the users, you then assign permission.
Once you’ve determined the appropriate employees, assign the corresponding RBP permission to the Role.
To assign user access to the Report Center, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose Edit.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Reports Permission category in User Permissions.
- Enable the appropriate permissions:
- Report Center: Enable access to Report Center
- Schedule Reports: Enable a user to create and manage schedules on their reports
- Choose Next to move to the Preview tab.
- Select Save.
Levels of Permissions to Report Types
Each report type can have different levels of access provided to users. These levels of access within Report Center are maintained by role-based permissions. In general, you have:
Report Consumers: can run reports shared with them
Report Creators/Designers: can create reports and manage the reports they create
Report Administrators: can create and manage all reports
The following table differentiates the levels that you can permission for the different report types:
| Type | Consumer | Creator/Designer | Administrator |
| Story | | X | X |
| Table | X | X | X |
| Canvas | X | X | X |
| Dashboard/Tile | X | | X |
Note
You do not have to permission consumer access for stories; users can automatically access stories that are shared with them if they have access to Report Center.
Assignment of Permissions to Administrator Table Reports
You can assign users the full access to all table reports with administrative permissions.
To assign permission to administer Table Reports, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Manage Dashboard/Reports category in Administrator Permissions.
- Enable the following as necessary:
- Report Admin | Access All Reports: Access all table reports.
- Report Admin | Manage Ownership: Change author of table reports.
- Report Admin | Restore Deleted Reports: Restore deleted table reports.
- Choose Next to move to the Preview tab.
- Select Save.
Assignment of Permissions to Create or Run Table Reports
You can assign users the ability to create and run different SAP SuccessFactors report types.
To assign permission to create or run a Table Report, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Report Permissions category in User Permissions.
- Enable the following as necessary:
- To allow creating new reports, select Create Report and select the modules based on which Table Reports you want to create.
- To allow running reports, Select Run Report and select the modules based on which reports you want to run.
- Choose Next to move to the Preview tab.
- Select Save.
If you select a particular domain, for example, Compensation Planning, you see compensation details data based on the RBP target population.
Assignment of Permissions to Administer Canvas Reports
To assign permission to administer Canvas reports, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Analytics permissions category in User Permissions.
- Select the appropriate Functional permissions:
Canvas Designer Admin: Assigns Admin permissions to the user so that they can edit, delete, copy, share, label, and export all Canvas reports
Detailed Reporting: Allows the user to create queries with Detailed Reporting or Advanced Reporting
Report Distributor: Allows the user to create report bundles for e-mail distribution
- Choose Next to move to the Preview tab.
- Select Save.
Assignment of Permissions to Create or Run a Canvas Report
To assign permission to create Canvas reports, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Analytics permissions category in User Permissions.
- Select the appropriate Functional permissions:
- Navigate to the Report Permissions category in User Permissions.
- Select the appropriate permissions:
To allow the creating of new reports with certain modules, select Create Report and select the modules based on which you want to create Canvas reports.
To allow the running of reports, select Run Report and select the modules based on which you want to run Canvas reports.
- Choose Next to move to the Preview tab.
- Select Save.
Note
Report consumers only need to be assigned the permission Run Report. No permission in the Analytics permission category needs to be assigned.
Assignment of Permissions to Administer Tiles and Dashboards
This role must be given only to administrators and report designers who build tiles and dashboards.
To assign permission to create and manage Tiles and Dashboard reports, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Manage Dashboard / Reports category in Administrator Permissions.
- Select the Analytics Tiles and Dashboards permissions.
- Choose Next to move to the Preview tab.
- Select Save.
Note
All dashboards and tiles are manageable in Report Center by users with this permission, not only the dashboards and tiles they create.
Assignment of Permissions to Run Tiles and Dashboard Reports
To assign permission to run a tile or a standard dashboard, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Report Permissions category in User Permissions.
- To allow a user to run all or certain tiles and standard dashboards, enable Analytics Tiles and Dashboards and select the appropriate options.
- Choose Next to move to the Preview tab.
- Select Save.
Assignment of Permissions to Administer Story Reports
To assign a user as a Story Report Admin, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Manage Dashboard/Reports category in Administrator Permissions.
- Select the Story Admin.
- Choose Next to move to the Preview tab.
- Select Save to save the changes.
Enablement of a User to Create Story Reports
To enable a user to create Story Reports, complete the following steps:
- Navigate to Manage Role Permissions.
- Select the appropriate role.
- Verify that the Permission tab is selected and choose the Edit button.
- Choose Next to move to the Add Permissions tab.
- Navigate to the Report Permissions category in User Permissions.
- Enable the following as necessary:
- Enable the permission Create Story.
- Select either All or individual schemas the role needs to access.
- Choose Next to move to the Preview tab.
- Select Save.
Note
No user permissions are required to run stories that are shared with a user.
Note
Each enabled schema may require additional RBP permissions to create and run stories on that schema.
Reports Permission Matrix
The following table lists the permissions required to create and manage different reports in Report Center.
Reports Permission Matrix
| | Table | Canvas | Tile | Dashboard | Story |
|---|
| New | If Create Report Schema permission is enabled. | If Canvas Designer or Canvas Designer Admin permission is enabled. | If Analytics and Dashboards Admin permission is enabled. | If Analytics and Dashboards Admin permission is enabled. | If Create Story is enabled. |
| Run | If: You're the Report Author. (OR) Report is shared with the user. (OR) Report Admin – Access All Reports is enabled. (AND) corresponding Run Report Schema permission is enabled. | If: Canvas Designer permission and you're the Report Author. (OR) Canvas Designer Admin permission is enabled. (OR) Report is shared with the user (AND the) corresponding Run Report Schema permission is enabled. | N/A | If: Analytics and Dashboards Admin permission is enabled. (OR) Dashboard is shared with the user. | If: Report Author. (OR) Report is shared with read. (OR) Story Admin permission is enabled. |
| Edit | If: You're Report Author. (AND) corresponding Create Report Schema permission is enabled. | If: Canvas Designer permission and you're the Report Author. (OR) Canvas Designer Admin permission is enabled. | If: Analytics and Dashboards Admin permission is enabled. (AND) Corresponding Create Report Schema permission is enabled. | If Analytics and Dashboards Admin permission is enabled. | If: Report Author. (OR) Report is shared with Edit. (OR) Story Admin permission is enabled. |
| Share | See permission for Edit. | See permission for Edit. | See permission for Edit. | See permission for Edit. | If: Report Author. (OR) Report is shared with Full Access. (OR) Story Admin permission is enabled. |
| Duplicate | See permissions for Edit. (OR) Report is shared with the user. (AND) corresponding Create Report Schema permission is enabled. | See permission for Edit. | See permission for Edit. | See permission for Edit. | See permission for Edit. |
| Delete | See permission for Edit. | See permission for Edit. | See permission for Edit. | See permission for Edit. | See permission for Edit. |
| Export | If Create Report permission (AND) the report must be created either by you or shared with you. | If Canvas Designer permission (AND) the report must be created either by you or shared with you. | See permission for Edit. | See permission for Edit. | See permission for Edit. |
| Label | See permission for Edit. | See permission for Edit. | See permission for Edit. | See permission for Edit. | See permission for Edit. |
| Schedule | See permission for Edit. | See permission for Edit. | NA | NA | See permission for Run. (AND) have create Report-Story permission. |
| Import (show import button if user has any of these permissions) If they do meet any of these permissions, then they can import any file. | Any Create Table Schema permission is enabled. | Canvas Designer permission is enabled. (OR) Canvas Designer Admin permission is enabled. | If Analytics and Dashboards Admin permission is enabled. | If Analytics and Dashboards Admin permission is enabled. | If: Create Story is enabled. |
| Change Author | Report Author (OR) Manage Ownership. | Report Author (OR) Canvas Designer Admin. | Report Author (OR) Analytics Tiles & Dashboards. | Report Author (OR) Analytics Tiles & Dashboards. | If: Report Author. (OR) Story Admin permission is enabled. |
Summary
Permission Categories:
- Two main types: user-level access (report consumers/designers) and administrator-level access (full control).
- Only security administrators can modify Role-Based Permissions (RBP).
User Permissions:
- Report Center access allows creating, running, and managing reports.
- Schedule Reports enables scheduling and editing report schedules.
- Run Report permits executing reports with selected data domains.
Administrator Permissions:
- Manage Report Center controls settings and syncs search repositories.
- Report Admin manages ownership, restores deleted reports, and accesses all table reports.
- Story Admin and Canvas Designer Admin provide full control over respective report types.
Assignment Process:
- Navigate to Manage Role Permissions, select a role, and enable necessary permissions.
- Save changes to apply access levels for users or administrators.
Report Types & Access Levels:
- Consumers can run shared reports.
- Creators/Designers can create and manage their own reports.
- Administrators have full control over all reports.