BusinessObjects Enterprise Administrator's Guide

Decreasing rights to the Sales subfolders

Recall that the security requirements for the regional sales reports are as follows:

• Sales staff can view reports for their own region and can refresh these reports against the database to view the most recent data.
• If the staff member is also a Manager, he or she can view and refresh reports from all regions.

You will use the various Sales groups to decrease rights appropriately for each Regional Sales folder.

To decrease rights to the regional Sales folders

1. Go to the Regional Sales - JP folder and click its Rights tab.
2. Click Add/Remove.
3. In the Select Operation list, click Add/Remove Groups.
4. In the Available groups list, select Sales Japan.
5. Click the > arrow; then click OK.

You are returned to the Rights tab of the Regional Sales - JP folder.

6. In the Access Level column, select the following rights for each group:
• Administrators: Inherited Rights
• Everyone: Inherited Rights
• Sales: No Access
• Sales Japan: View On Demand
• Sales Managers: Inherited Rights
• Sales Report Designers: Inherited Rights
7. Click Update.

The Net Access column shows your new security settings. As required, the Sales Japan and the Sales Managers groups have View On Demand access, which allows them to refresh reports against the database to view the latest data. The Sales Report Designers retain their advanced rights, and all other users are prevented from accessing the folder (except for Administrators).

8. Repeat steps 1 to 6 for the Regional Sales - USA folder, but grant View On Demand access to the Sales USA group (instead of to the Sales Japan group).

You are now ready to complete the tutorial by customizing security for the final level of Sales folders—the Managers Only folders.

To decrease rights to the Managers Only folders

1. Go to the Regional Sales - JP folder and click its Subfolders tab.
2. Click the link to the Managers Only folder and click its Rights tab.
3. In the Access Level column, select the following rights for each group:
• Administrators: Inherited Rights
• Everyone: Inherited Rights
• Sales: Inherited Rights
• Sales Japan: No Access
• Sales Managers: Full Control
• Sales Report Designers: Inherited Rights
4. Click Update.

The Rights tab of this Managers Only folder now shows that the Administrators, Sales Managers, and Sales Report Designers groups all have Full Control access to the folder. Members who do not belong to one of these groups are completely restricted from the folder.

5. Go to the Regional Sales - USA folder and click its Subfolders tab.
6. Click the link to the Managers Only folder and click its Rights tab.
7. In the Access Level column, select the following rights for each group:
• Administrators: Inherited Rights
• Everyone: Inherited Rights
• Sales: Inherited Rights
• Sales Managers: Full Control
• Sales Report Designers: Inherited Rights
• Sales USA: No Access
8. Click Update. The Rights tab of this Managers Only folder shows again that the Administrators, Sales Managers, and Sales Report Designers groups all have Full Control access to the folder. Members who do not belong to one of these groups are completely restricted from the folder.

You have now reached the end of this tutorial.

Related topics:    

To return to the beginning of this tutorial, see Setting up an open system of decreasing rights.