1

Prevent a user to create charts/applications

Hello, 

Is there a way to prevent a user to create Axiom reports? I can see there are options to deny access to views (but prevents the user to open reports on views denied) and deny access to Read Only folder (a user still is able to create reports and publish them in the Public folder). 

I'm looking for a way to have a "Consumer" group that is purely dedicated to consuming Axiom reports (and will not/should not have the ability to create new ones). 

Thanks

4 replies

null
    • smason
    • 5 days ago
    • Reported - view

    Hi ,

    With the new Axiom Security feature in v25.3.1, you can deny write access to any folder within Axiom for a specific user, even their own private folder.

    Additionally, it may interest you to know you can pass in a Mode URL parameter which hides the edit and menu buttons from the screen. This is useful if you're wanting to embed Axiom in another application.

    https://helpcenter.canarylabs.com/t/q6yfyzt/application-url-parameters-version-25#mode

    • apermag
    • 5 days ago
    • Reported - view

    Thanks  , been reading about Axiom Security and certainly we'll be benefiting of this feature for access control. The security model I have designed for our needs is that: 

    1. Consumers: should be group of users who ONLY consume reports - never create. Even in their private folders. 
    2. Authors: generate dashboards. 

    I didn't get the upgrade yet in our trial instance, but if you can clarify if the permissions are inherited, that would be great. For example: if I set Read to Public, would automatically set Read for any subfolder? Or would I have to set the permissions for every new folder created? 

    Is the Add File Security Entry menu discovering folders, or are these required to be typed manually? 

    Thanks 

      • smason
      • 4 days ago
      • Reported - view

       Permissions are inherited from the parent folder, but can be overwritten if given explicit permissions on the subfolder.
      Folder directories, for now, must be manually typed in.

    • apermag
    • 4 days ago
    • Reported - view

    Thanks 

Content aside

print this pagePrint this page
  • Status Answered
  • 1 Likes
  • 4 days agoLast active
  • 4Replies
  • 17Views
  • 3 Following