This feature is currently available only to customers participating in a Private Preview. If you'd like to participate and be among the first to try this feature, ask our support or account team for details.
Reporting
The Delinea Platform provides for robust reporting across all available data on the platform.
Select Insights. The Report library presents reports in specific collections. These include:
-
Report Library - The built-in Report library allows you to quickly obtain insights into your institutions security by running and scheduling reports predefined for use. From the Report library, You are able to generate a report defined by specific filters (Dynamic report) that meet a more granular report customized for your institution.
-
My Reports - Consists of reports you have run with specific filters. These reports can also be scheduled and shared.
-
Scheduling Reports - Any report you have scheduled to run, along with any scheduled reports that have been shared with you are available to run, share, and delete.
-
Secret Server Reports - These reports are specific to secrets that were accessed by a particular user during a specific time frame. Results will only include secrets you can see. These reports cannot be scheduled and snapshots cannot be created since the reports present static data.
Reporting offers flexibility in viewing, running, and scheduling reports across the default reports in the Report library and any Dynamic reports and snapshots you schedule, as indicated in this diagram.
Permissions
Access to viewing, generating, saving and sharing reports are dependent on the permission you have been granted by your administrator. See Roles and Permissions for details on assigning roles and permissions. See Platform Permissions for a comprehensive list of currently available permissions.
Permissions specific to reporting include:
-
Administer Reports - This is the broadest level of access. Administrators can do everything, including viewing all schedules and snapshots (even ones not shared with them), sharing results of any snapshot, and updating schedules they don't own.
-
Manage Reports - A mid-tier permission for power users who need to create and manage reports. Users with this permission can create reports and schedules, view and update schedules they own, create and view snapshots they own, share snapshot results they own, and access the full Report library and My reports.
-
View Reports - A read-only permission. Users can view reports and snapshots shared with them, download reports (if the report owner has enabled downloads), and unsubscribe from schedules and snapshots. They cannot create or share reports, they see Report Library and My reports in the navigation.
| Action | View Reports | Manage Reports | Administer Reports |
|---|---|---|---|
| Create reports/schedules | ✗ | ✓ | ✓ |
| View own schedules | ✗ | ✓ | ✓ |
| View all schedules | ✗ | ✗ | ✓ |
| View shared snapshots | ✓ | ✓ | ✓ |
| Share snapshot results | ✗ | ✓ (own/shared) | ✓ (all) |
| View Report Library | ✗ | ✓ | ✓ |
| Update others' schedules | ✗ | ✗ | ✓ |
Non-administrator users are scoped to only the reports relevant to their domain.
The content of reports is filtered based on the permissions of whoever ran or scheduled the report; so, a user's underlying role determines what data they see, even if they have the reporting permissions.
Permissions FAQs
As a non-admin subscribed to a schedule that I wish to unsubscribe from, do I see the Reporting left navigation? The Report library? My reports?
You see the My reports link only.
How do we combine permissions to ensure we can guard access appropriately
Adding View Reports, Administer Reports, or Manage Reports has no effect. Conversely, adding Manage Platform Reports to a View Reports user will.
Should the left navigation option appear/disappear based on whether or not I have reports shared with me?
For a View Reports user, they only see My reports, regardless of whether something was shared. If they have nothing, My reports will be empty. If they have no options for View Reports, Manage Reports or Administer Reports, they don’t see the Reporting navigation at all. This is current behavior for anyone without rights to a specific module. If they are a View Reports user, they see My reports (which includes Shared with me), but if nothing is shared, then they see no snapshots.
As an administrator, should I be able to create a custom role that allows users to see report snapshots that are shared with them but nothing else?
That is the View Reports permission.
As an administrator, should I be able to control access to report snapshots even for shared snapshots?
If the administrator has granted rights to others for Manage Reports permission, they have ceded the control of that to them. The rights go with the report.
