This feature is currently available only to customers participating in a Public Preview. For details, see Preview Program.
Reporting
Select Insights. The Report library presents reports in specific collections. These include:
-
Report Library - The built-in Report library gives you quick insight through predefined reports you can run and schedule. From the Report library, you can also generate a Dynamic report, which is a report built from specific filters for more granular, specific results.
-
My Reports - Consists of reports you have run with specific filters. These reports can also be scheduled and shared.
-
Scheduling Reports - Any report you have scheduled to run, along with any scheduled reports that have been shared with you are available to run, share, and delete.
-
Secret Server Reports - These reports are specific to secrets that were accessed by a particular user during a specific time frame. Results will only include secrets you can see. These reports cannot be scheduled and snapshots cannot be created.
Reporting offers flexibility in viewing, running, and scheduling reports across the default reports in the Report library, as well as any Dynamic reports and snapshots you have scheduled or saved.
Permissions
Access to viewing, generating, saving and sharing reports are dependent on the permission you have been granted by your administrator. See Roles and Permissions for details on assigning roles and permissions. See Platform Permissions for a comprehensive list of currently available permissions.
Permissions specific to reporting include:
-
Administer Platform Reports - This is the broadest level of access. For scheduled reports, administrators can do everything, including viewing all schedules, sharing results of any snapshot, and updating schedules they don't own.
Administrators cannot see snapshots not shared with them.
-
Manage Platform Reports - A mid-tier permission for power users who need to create and manage reports. Users with this permission can create reports and schedules, view and update schedules they own, create and view snapshots they own, share snapshot results they own, and access the full Report library and My reports.
-
View Reports - Allows viewing of Report Library and My reports in the navigation. Viewing the following types of report data is specific to:
-
Shared Snapshots (Shared with me in My Reports)
-
Dynamic Reports and Snapshots you own (Owned by me in My Reports)
Dynamic reports cannot be shared with the View Reports permission. Users with this permission cannot create or share reports.
-
| Action | View Reports | Manage Platform Reports | Administer Platform Reports |
|---|---|---|---|
| View shared snapshots | ✓ | ✓ | ✓ |
| View Report Library | ✗ | ✓ | ✓ |
| Create reports/schedules | ✗ | ✓ | ✓ |
| View own schedules | ✓ | ✓ | ✓ |
| View all schedules | ✗ | ✗ | ✓ |
| Update others' schedules | ✗ | ✗ | ✓ |
| Share snapshot results | ✗ | ✓ (own/shared) | ✓ (all) |
Non-administrator users are scoped to only the reports relevant to their domain.
The content of reports is filtered based on the permissions of whoever ran or scheduled the report; so, a user's underlying role determines what data they see, even if they have the reporting permissions.
Permissions FAQs
As a non-admin subscribed to a schedule that I wish to unsubscribe from, do I see the Reporting left navigation? The Report library? My reports?
You see the My reports link only.
How do we combine permissions to ensure we can guard access appropriately
Adding Read Platform Reports, Administer Platform Reports, or Manage Platform Reports has no effect. Conversely, adding Manage Platform Reports to a View Reports user will.
Should the left navigation option appear/disappear based on whether or not I have reports shared with me?
For a View Reports user, they only see My reports, regardless of whether something was shared. If they have nothing, My reports will be empty. If they have no options for View Reports, Manage Platform Reports or Administer Platform Reports, they don’t see the Reporting navigation at all. This is current behavior for anyone without rights to a specific module. If they are a View Reports user, they see My reports (which includes Shared with me), but if nothing is shared, then they see no snapshots.
As an administrator, should I be able to create a custom role that allows users to see report snapshots that are shared with them but nothing else?
That is the View Reports permission.
As an administrator, should I be able to control access to report snapshots even for shared snapshots?
If the administrator has granted rights to others for Manage Platform Reports permission, they have ceded the control of that to them. The rights go with the report.
