Illustrated on an extended example, this article shows you, how to organize product access and report rights via user management.

A basic use case is available here.


Preface

For our example we focus on a department with two users:

User A is a product manager and needs to access data from the German shop account ("Shop GER"). As he is only responsible for certain product-related key figures, his access to Mapp Intelligence should be limited to analyses from the section E-Commerce. His report rights should be restricted to READ ONLY rights for reports from the category "Online Marketing Reports". Nevertheless, he should still be able to view, create, share, edit, and delete private reports.

User B is Online Marketing Manager and also needs access to data from the German shop account ("Shop GER"). In contrast to User A his position requires access to all analyses in Mapp Intelligence. Furthermore, he needs to be able to fully administer the reports in the category "Online Marketing Reports" as well as his own private reports.

In order to implement the requirements of the depicted example, the following roles and categories have to be created and assigned:


Step 1: Create users

As a first step, the logins for User A and User B have to be created.

This is done at User Management > Users.

Create two new users. Fill in the basic user information and - if desired - set a password expiration date. Do not assign any rules yet.


Step 2: Manage product access with roles

Roles have to be set up to manage access to Mapp products.

This is done at User Management > Roles.

As role rights are added up when a user is assigned to multiple roles, each role will cover only one specific aspect.

For organizing the product access we have to create two roles - one for each user:

  • Role 1 (User A): Limits access to Mapp Intelligence to analyses from the section E-Commerce.
  • Role 2 (User B): Grants access to all analyses, that are available in Mapp Intelligence.

Due to the fact, that both users have to work with data from the German shop, the corresponding account "Shop GER" has to be assigned to both roles.

 

Setting up role 1 (User A)

First we create a role, that limits the product access to the E-Commerce analyses from Mapp Intelligence in the account "Shop GER".

1. Choose an appropriate name for the role and add a description.

2. Assign the account "Shop GER" to the role.

3. Select "Intelligence" as accessible product in the account configuration.

4. Assign User A to the role.

5. In the rights management, set the slider to "Custom". Check only "E-Commerce" for top-level menu access.

This restricts the access to the E-Commerce section of Mapp Intelligence. All analyses grouped there are available. Via second level and - if necessary - third level, specific analyses can be selected or unselected.

6. Save the role.

As only product access is managed with this role, report access can be left deactivated.

Also, this user does not need to change custom metrics or formulas:

Setting up role 2 (User B)

The second role to be set up grants access to all analyses, that are available in Mapp Intelligence, for the account "Shop GER".

1. Choose an appropriate name for the role and add a description.

2. Assign the account "Shop GER" to the role.

3. Select "Intelligence" as accessible product in the account configuration.

4. Assign User B to the role.

5. In the rights management, set the slider for "Intelligence" to "Full".

This grants complete access to all analyses available in Mapp Intelligence.

6. Save the role.

As only product access is managed with this role, report access can be left deactivated.


Step 3: Manage report rights with roles and categories

In order to manage access and editing rights to reports, categories, as well as roles, have to be set up:

  • Categories organize the sharing of reports, more specifically in which user logins reports are available, that are assigned to a category.
  • Roles serve to set the access rights to reports assigned to the category, to which a role is assigned: view, create, share, edit/delete (or full access to all reports, no matter to which category they are assigned).

Setting up report categories

This is done at User Management > Categories.

Private reports are not assigned to any report category, thus it is not necessary to create a specific category for them.

For managing the access to Online Marketing Reports, a corresponding role "Online Marketing Reports" has to be set up: 

Setting up a role, that allows viewing, creating, sharing and editing/deleting of private reports (User A and User B)

This is done at User Management > Roles.

Both users should be able to view, create, share, and edit/delete reports, that are not assigned to any report category (-> private reports). The rights for doing so are managed via a role, that is assigned to them.

1. Choose an appropriate name for the role and add a description.

2. Assign the account "Shop GER" to the role.

3. Select "Intelligence" as accessible product in the account configuration.

Even though access to Mapp products is managed via the roles created in Step 2, Intelligence has to be selected as accessible product for this role, as access to the report section necessarily requires the access to Mapp Intelligence.

 4. Assign User A and User B to the role.

5. In the rights management, set the slider to "No".

Rights for the access to the analyses in Mapp Intelligence are managed via the roles created in Step 2. Therefore, in this role the rights for menu access in Mapp Intelligence have to be set to "No", as the rights of multiple roles assigned to one user are added up based on the max privilege principle.

6. Set "Report access" to "Active" and the "Access level" to "Edit/Delete". Do not assign any categories.

As a consequence, users, that are assigned to this role, can view, create, share, and edit/delete reports but not assign them to a report category. Thus, these are private reports, only accessible by these users and users that belong to a role with "Full Access" to reports.

7. Save the role.

Setting up a role, that allows viewing the category "Online Marketing Reports" (User A)

This is done at User Management > Roles.

User A should be able to view reports, that are assigned to the report category "Online Marketing Reports". A corresponding role has to be created.

1. Choose an appropriate name for the role and add a description.

2. Assign the account "Shop GER" to the role.

3. Select "Intelligence" as accessible product in the account configuration.

Even though access to Mapp products is managed via the roles created in Step 2, Intelligence has to be selected as accessible product for this role, as access to the report section necessarily requires the access to Mapp Intelligence.

4. Assign User A to the role.

5. In the rights management, set the slider to "No".

Rights for the access to Mapp Intelligence are managed via the roles created in Step 2. Therefore, in this role the rights for menu access in Mapp Intelligence have to be set to "No", as the rights of multiple roles assigned to one user are added up based on the max privilege principle.

6. Set "Report access" to "Active" and the "Access level" to "View". Assign the category "Online Marketing Reports" to the role.

As a consequence, users, that are assigned to this role (in our case User A), can solely view reports, that are assigned to this category.

7. Save the role.

Setting up a role, that allows viewing, creating, sharing and editing/deleting of reports, that are assigned to the report category "Online Marketing Reports" (User B)

This is done at User Management > Roles.

User B should be able to view, create, share, and edit/delete reports in the report category "Online Marketing Reports".

1. Choose an appropriate name for the role and add a description.

2. Assign the account "Shop GER" to the role.

3. Select "Intelligence" as accessible product in the account configuration.

Even though the access to Mapp products is managed via the roles created in Step 2, Intelligence has to be selected as accessible product for this role, as access to the report section necessarily requires the access to Mapp Intelligence.

4. Assign User B to the role.

5. In the rights management, set the slider to "No".

Rights for the access to Mapp Intelligence are managed via the roles created in Step 2. Therefore, in this role the rights for menu access in Mapp Intelligence have to be set to "No", as the rights of multiple roles assigned to one user are added up based on the max privilege principle.

6. Set "Report access" to "Active" and the "Access level" to "Edit/Delete". Assign the category "Online Marketing Reports" to the role.

As a consequence, users, that are assigned to this role (in our case User B), can view, create, share, and edit/delete reports, that are assigned to this category.

7. Save the role.