Best practices on Jaspersoft permissions for custom reports
search cancel

Best practices on Jaspersoft permissions for custom reports

book

Article ID: 139783

calendar_today

Updated On:

Products

Clarity PPM SaaS Clarity PPM On Premise

Issue/Introduction

What would be the best way to assign the permissions for a custom report on a custom domain in Jaspersoft

Environment

All Jaspersoft environments 

Resolution

  • For a custom report and a custom folder and domain the best practice would be to create a separate custom role in Jaspersoft and then ensure that the report, domain, folder and all the report components have it assigned correctly. 
  • If you do not usually assign permissions in Jaspersoft or for any reason would not like to go with the best practice, the second best recommendation would be to use one of the CSK roles. 
    In Jaspersoft and Clarity there is a number of CSK permissions, used with OOTB reports, such as the ones below: 

CSK_ROLE_ADMINISTRATION View items created in the Ad Hoc Views and Dashboards folders and run administration reports. This role corresponds to the PMO Advanced Reporting Administration access group.

CSK_ROLE_ALL_REPORTS_DOMAINS View items created in the Ad Hoc Views and Dashboards folder. View all domains and run administration, investment, project, resource, time and financial reports. This role corresponds to the PMO Advanced Reporting All Reports and Domains access group.

CSK_ROLE_APPLICATION_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. View the Application Management domain. This role corresponds to the PMO Advanced Reporting Application Management access group.

CSK_ROLE_CUSTOM_MASTER_OBJECTS View items created in the Ad Hoc Views and Dashboards folders. View the Custom Master Objects domain. This role corresponds to the PMO Advanced Reporting Customer Master Objects access group.

CSK_ROLE_FINANCIAL_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. Vew the Financial Management domain and run financial reports. This role corresponds to the PMO Advanced Reporting Financial Management access group.

CSK_ROLE_IDEA_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. View the Idea Management domain. This role corresponds to the PMO Advanced Reporting Idea Management access group.

CSK_ROLE_INVESTMENT_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. View the Investment Management domain and run investment reports. This role corresponds to the PMO Advanced Reporting Investment Management access group.

CSK_ROLE_PROGRAM_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders and run program reports. This role corresponds to the PMO Advanced Reporting Program Management access group.

CSK_ROLE_PROJECT_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. View the Project Management domain and run project reports. This role corresponds to the PMO Advanced Reporting Project Management access group.

CSK_ROLE_RESOURCE_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. View the Resource Management domain and run resource reports. This role corresponds to the PMO Advanced Reporting Resource Management access group.

CSK_ROLE_TIME_MANAGEMENT View items created in the Ad Hoc Views and Dashboards folders. View the Time Management domain and run time reports. This role corresponds to the PMO Advanced Reporting Time Management access group.

  • You can use one that is relevant to the custom report, go to right-click - Permissions on custom report, folder, domain and assign it in Jaspersoft. 
  • Once this is set up, you can use your usual method to assign the PMO/ CSK rights to Clarity users (either manual in Jaspersoft or via the Clarity groups) 
  • Note this method will mean that the user that has access to say CSK_ROLE_PROJECT_MANAGEMENT will see both the custom report and OOTB project PMO reports. 

Note: Broadcom Support does not recommend assigning the Jaspersoft ROLE_ permissions to custom reports and domains.