Access Control for Report

Report roles, operations, access control rules.

Resource Roles for Reports

Reports are read-only documents, so there is only a view permission. Also, executing SQL and retrieving the results of the execution are determined by the report's permission, not the connection's permission.

Role name	Summary
Report Viewer	Can view the report and refresh the query results if the report allows refresh execution.

Report Operations and Access Control Rules

Operations	Required Roles
View report contents Comment	Report Viewer

Operations related to publishing a report are influenced by the access scope of the original notebook from which the report is created.

Operations	scope: Workspace	scope: Teamspace	scope: Private	scope: Shared
Publish reports Change permissions of reports	"Workspace Editor" AND "Connection User" *	"Teamspace Editor" AND "Connection User" *	"Workspace Editor" AND "Connection User" *	N/A
Delete reports.	Workspace Editor	Teamspace Editor	Workspace Editor	N/A
Edit report settings.	Workspace Editor	Teamspace Editor	Workspace Editor	N/A

*: The Connection User role is required for all connections within the publishing pages of the report.