Configuring Report Access for Non-Admin Users - Identity Manager

Products

• CA Identity Manager

Issue/Introduction

By default, access to the Reports view in the Identity Manager User Console is restricted to administrative roles. This article outlines how to configure a specialized Admin Role that allows non-administrator users to run and view reports without granting them broader administrative privileges.

Environment

Identity Manager 14.5

Cause

Report functionality in Identity Manager is categorized as an "Admin Task." Consequently, any user requiring access to reports must be assigned an Admin Role that includes the necessary Report tasks.

Resolution

To grant a user access to the Reports view without providing full administrative rights, follow these steps:

1. Log in to the Identity Manager User Console.
2. Navigate to Roles and Tasks > Admin Roles > Create Admin Role.
3. Create a new role (e.g., "Report Viewer").
4. Navigate to the Tasks tab of the new role.
5. In the Filter by category field, select Reports.
   
   
   
6. Select the specific report-related tasks you wish to grant access to (e.g., Account Details Report, Administration Report, Snapshot Report).
7. Save the new role.
8. Navigate to Roles and Tasks > Admin Roles > Modify Admin Role to verify the role is correctly configured.
9. Navigate to Users > Modify User and assign the "Report Viewer" role to the appropriate users.
10. Confirm that the users can now log in to the Identity Manager User Console and see the Reports tab.