BusinessObjects Enterprise Administrator's Guide

Creating a group of folder administrators

This section of the tutorial shows how to provide a particular group of users with a customized level of administrative control over a set of folders. In general, you can accomplish this with the Full Control access level. This example, however, uses advanced rights to grant the Sales Report Designers group a particular set of administrative privileges to all Sales folders.

To create a group of Sales folder administrators

1. If you are not already there, go to the Rights tab of the Worldwide Sales folder.
2. In the Access Level list for the Sales Report Designers group, select Advanced.

The Advanced Rights page appears. You will use this page to grant group members a high level of control over the folder and its contents. However, you will not let any group member delete objects that have been added to a Sales folder.

3. To ensure that you completely break all inheritance patterns, clear the "Worldwide Sales" will inherit rights from its parent folders check box.
4. Click Apply.

Now that you have disabled all rights inheritance, the advanced rights that you specify will be the only rights that group members have to the folder.

5. In the Explicitly Denied column, select the following rights:
• Modify the rights users have to objects
• Delete objects

  Tip:    You may choose to explicitly deny additional rights to suit your needs. For instance, to prevent these folder administrators from copying confidential reports to public folders, you could deny the "Copy objects to another folder" right. Or, if you prefer to retain all administrative control over report-processing servers, you could deny the "Define server groups to process jobs" right.

6. In the Explicitly Granted column, select all remaining rights.
7. Click OK.

You are returned to the Rights tab for the Worldwide Sales folder. The Net Access column now shows that the Sales Report Designers group has Advanced rights to this folder.

Tip:    Click the Advanced link in the Net Access column when you need to review or modify a set of advanced rights that have already been applied to a user or group.

Now that you have set object rights on the uppermost Sales folder, you will proceed to decrease rights as you descend the folder hierarchy.

Related topics:    

• To proceed to the next step in this tutorial, see Decreasing rights to the Sales subfolders.
• To return to the beginning of this tutorial, see Setting up an open system of decreasing rights.