Xtraction powered by Landesk

About user roles, security, and permissions

Once Xtraction is installed with the basic settings provided during installation, it's useful to become familiar with the different roles for Xtraction users.

Users can access Xtraction through any browser to view previously saved dashboards, documents, and reports. If allocated a designer role, a user can also design new dashboards from available components or edit existing ones.

User roles defined

Administrator: Manages user accounts, user roles, groups, and data policies and allocates privileges to all other users. Users must apply to the administrator if different privileges are sought.

Content designers (collective role): Create reporting content for use by other users. A user can be assigned only one type of designer role. Specific roles in order of precedence are detailed below:

Enterprise designer: Has access to designer functions with the ability to create or edit private and shared objects including dashboards, dashboard folders, filters, and filter folders. Enterprise designers can see all private objects owned by other users.

Designer: Has access to the same designer functions as the enterprise designer, with the ability to create or edit private and shared objects. Privileges are limited to those objects in previously shared folders to which the designer has access.

Private designer: Has access to the same designer functions as the enterprise designer, with the ability to create or edit private objects. Privileges are limited to creating private objects. Private objects can only be saved into the user’s folder and can only be seen by their creator and by the enterprise designer.

Viewers: Any user of Xtraction without designer privileges. This role is limited to read-only access. Viewers can see and interact with any public dashboard but can't create or edit objects. You can configure one default data policy for all viewers to ensure that they can only view generic data. For details, see Creating data policies.

Scheduler: Can schedule the export of documents and reports in a variety of formats. This role is usually assigned in combination with a designer role.

Alert users: Can set up dashboard and threshold alerts and view breach history. This role is usually assigned in combination with a designer role.

Functions available to each user role

The following table shows all functions accessible to each user role as indicated by an "x":

Function

Admin

Enterprise Designer

Designer

Private Designer

Viewer

Scheduler

Alert User

Administrator

x

 

 

 

 

 

 

Dashboard designer

 

x

x

x

 

 

 

Document designer

 

x

x

x

 

 

 

Report designer

 

x

x

x

 

 

 

Schedule document

 

x

 

 

 

 

 

Add public objects (i.e., dashboards, filters, folders)

 

x

x

 

 

 

 

Update public objects

 

x

x

 

 

 

 

Update object owners

 

x

 

 

 

 

 

View/Update private objects owned by others

 

x

 

 

 

 

 

Set permissions

 

x

x

 

 

 

 

Set permissions
for groups

 

x (for all groups)

x (for designer’s groups)

 

 

 

 

Set permissions
for users

 

x (for all users)

x (for users in designer’s groups)

 

 

 

 

Schedule documents and reports for export

x

x

 

 

 

x

 

Create alerts on dashboards

x

 

 

 

 

 

x

Create threshold alerts

x

 

 

 

 

 

x

View personal alerts

x

 

 

 

 

 

x

View all alerts

x

 

 

 

 

 

 

Security and where it's managed

Xtraction's access privileges are managed by these provisions:

Access to the Xtraction application is controlled by user accounts and user authentication.

Access to Xtraction functionality is controlled through user roles, where groups and folder permissions define access to dashboards, documents, and filters.

Access to specific data is managed by data policies set at the user level.

The management of user accounts, roles, groups, and data policies is handled within the Administration links at the bottom of the Xtraction page.

Folder permissions are managed at the designer level. For details, see Managing folders.

Folders accessible to designers and viewers

Below is a summary of actions and folders accessible by users with designer roles and by viewers:

Role

Allowed action

Allowed folders

Enterprise designer

Open, Save, Move, or Explore

My folders, shared folders, and user folders

Designer

Open, Save, Move, or Explore

My folders and shared folders

Private designer

Open

Save, Move, or Explore

My folders and shared folders

My folders only

Viewer

Open.

All other interaction is prevented by the absence of relevant privileges

My folders and shared folders


Was this article useful?    

The topic was:

Inaccurate

Incomplete

Not what I expected

Other