Remedyforce/Salesforce Reports Dashboard Security

Access to reports based on folders – Traditional model

Ex: Folder name could be Management reports , my reports , general reports

• To control this go to report folder >edit
• The folder can be public , hidden, shared
• Public: accessible by all users with or without portal users.
• Hidden: Makes folder hidden from all users. Works as private. Like my reports.
• Shared: allows you to grant access to a desired set of users like pubic groups, roles etc

 

Enhanced Sharing for Reports and Dashboards

This give more detail access to folders

To enable

1. From Setup, click Customize | Reports & Dashboards | Folder Sharing.
2. Select Enable access levels for sharing report and dashboard folders.
3. Click Report and Dashboard Folder Sharing.

 Understating access 

• Viewer Access

With Viewer access you can see the data in a report or dashboard. User can’t make any changes, except by cloning it into a new report or dashboard. All users have at least Viewer access to report and dashboard folders that have been shared with them.

• View a folder in the folder tree
• View all contents (Run Report, Refresh Dashboard)

  Editor Access

User can view and modify the reports and dashboards it contains, and move them to and from any other folders you have Editor or Manager Access to.

• Everything from Viewer access plus…
• Edit all contents of a folder
• Add contents to folder
• Delete contents from folder

  Manager Access

With Manager access, you can do everything Viewers and Editors can do, plus control other users’ access to it, change its properties, or delete it.

• Everything from Editor access plus…
• Edit folder name
• Edit/delete/remove shares

 

User permission’s for Reports sharing and dashboards

Administrator can decide or fine tune these permission with combination of level of access to reports and dashboard folders. The overall access is based on combination of these settings. Administrator can create permission sets specific for needed access if they do not want to give permissions to all users from same profile.Show Reports and dashboards tab on Profile or Permission set level so that user can access reports or dashboards tab

 

User Permission	Description
Show Reports and Dashboard’s tab Default on	This will expose the tab to users and they can see Reports or Dashboards tab.
Create and Customize Dashboards	Create, edit, and delete dashboards in My Personal Dashboards folder. Create dashboards and save into any shared folder if sharing rights allow
Create and Customize Reports	Create, edit, and delete reports in My Personal Custom Reports folder. Create reports and save into any shared folder if sharing rights allow.
Create Dashboard Folders	Create dashboard folders and manage them if sharing rights allow
Create Report Folders	Create report folders and manage them if sharing rights allow.
Edit My Dashboards	Edit, move, save, and delete dashboards you created in shared folders.
Edit My Reports	Edit, move, save, and delete reports you created in shared folders
Manage Dashboards in Public Folders	Create, edit, delete dashboards*, and manage their sharing in all public dashboard folders, which does not include others’ Manage Dashboards in Public Folders personal folders. This permission allows users to edit and share dashboards in all folders, including hidden folders. They also get these permissions: • Create and Customize Dashboards • Create Dashboard Folders • Edit My Dashboards • View Dashboards in Public Folders ( *To edit a dynamic dashboard, users also need Manage Dynamic Dashboards and View My Team’s Dashboards.)
Manage Reports in Public Folders	Create, edit, delete reports, and manage their sharing in all public report folders, which does not include others’ personal Manage Reports in Public Folders. This permission allows users to edit and share reports in all folders, including hidden folders. They also get these permissions: • Create and Customize Reports • Create Report Folders • Edit My Reports • View Reports in Public Folders
View Dashboards in Public Folders	View dashboards in public dashboard folders, which does not include others’ personal folders
Manage Reports in Public Folders	Create, edit, delete reports, and manage their sharing in all public report folders, which does not include others’ personal Manage Reports in Public Folders . This permission allows users to edit and share reports in all folders, including hidden folders. They also get these permissions: • Create and Customize Reports • Create Report Folders • Edit My Reports • View Reports in Public Folders
View Reports in Public Folders	View reports in public report folders, which does not include others’ personal folders.

Reference : Salesforce documentation