nVISAGE Permissions Overview

nVISAGE-related security roles (detailed below) are now exposed to nVIRO administrators to be administered in the same way as other user permissions/roles within nVIRO. Since client expectations vary as to what an nVIRO Super User's permissions should be in nVISAGE vs. what a 'normal' user should be able to do, three new security groups were added. 

Each security group listed below is defined by a number of permissions (or roles); these roles are configurable, but great care should be taken when modifying security groups, as misconfiguration can expose powerful data query tools that can confuse users that are not well-versed in writing relational queries. For details about configuration of security groups themselves, see the Security Groups help topic. The three new security groups are: 

• nVISAGE Reports Administrator

• nVISAGE Reports Developer

• nVISAGE Reports User

The security roles/permissions (that make up the security groups listed above) are:

• Reports - nVISAGE - View Shared Folder (Role may view Shared Reports folder contents)

• Reports - nVISAGE - Create New Report (Role may add new reports (using the New Report button))

• Reports - nVISAGE - Manage Data Source (Role may add/update/remove data sources in reports)

• Reports - nVISAGE - Manage Filters (Role may add/update/remove filters in reports)

• Reports - nVISAGE - Manage Shared Reports (Role may add/update/remove shared reports)

• Reports - nVISAGE - Manage My Reports (Role may add/update/remove my own reports)

• Reports - nVISAGE - Manage Map Layers (Role may add/update/remove map layers)

• API Administrator (Role may add/modify API services)

Note:  The "nVIRO User" Security group by default has the roles of 'View Shared Folder' and 'Manage My Reports'. 

The nVISAGE Reports Administrator security group is defined by the roles listed below:

Open

The nVISAGE Reports Developer security group is defined by the roles listed below:

Open

The nVISAGE Reports User security group is defined by the roles listed below:

In addition to the roles/permissions listed above, there is an additional role/permission that enables interfacing systems to access APIs defined in nVISAGE: 

• API Accessor - Role may call API GET and POST services

Note: The API service role above does not have any relevance to users that are using nVISAGE to access data; it is used for interfacing systems only

• Additional Special Report Folders - Roles exist for each of the following special folders

  • Map Layers - this folder allows custom map layers to appear in Explorer and the Site Plan

  • Data Warehouse - this folder allow reports to materialize as views/tables in the remote Data Warehouse

  • Prefill - this folder allows reports to be created that will be used for prefill on nForm and nSpect forms

  • System Administration - this folder contains a set of reports of the Data Hub catalog and nVisage Reports, and allow (VERY FEW) admins to edit the names of catalog items and report columns