Access Control for Report

Report roles, operations, access control rules.

Roles for Reports

Reports are read-only documents. The ability to execute queries is determined by the settings of the report, not by permissions. Therefore, only the Viewer role exists.

Role name	Summary
report.Viewer	Can view the report and refresh the query results if the report allows refresh execution.

Report Operations and Access Control Rules

Operations	Required Roles
View report contents. Comment on reports.	report.Viewer

Operations related to publishing a Report are influenced by the access scope of the original Notebook from which the Report is created.

Operations	scope: Workspace	scope: Teamspace	scope: Private	scope: Shared
Publish reports.	workspace.Editor AND connection.User *	teamspace.Editor AND connection.User *	connection.User *	N/A
Delete reports.	workspace.Editor	teamspace.Editor	-	N/A
Edit report settings.	workspace.Editor	teamspace.Editor	-	N/A
Change permission settings of reports.	workspace.Editor AND connection.User *	teamspace.Editor AND connection.User *	connection.User *	N/A

*:connection.User role means that these operations need the respective role for all connections within the Notebook. This applies to protected and private access levels. For the workspace access level, no specific connection role is required.