Users and Groups in SAP BI launch pad with and without Design Mode setting

[MargaridaCastr1]

Hello,

In SAP BI launch pad CMC we have a user that was initially part of 3 different groups. These 3 groups had the "Design Mode" setting selected, that is, the users of these groups were able to go into design mode in WEBI reports.

There was a need to create a new group, for a set of new reports. But in these reports users are not supposed to have access to the design mode, in this group setting the "Design mode" setting is not selected.

We added the user that we initially mentioned to this new group.

So this user is now part of 4 different groups:

• 3 in which he has access to design mode
• 1 in which he does not have access to design mode

We were expecting that only in the new folder with the new reports, where we associated the new group, this user would not have access to design mode, but what happened is that the user no longer had access to design mode in all reports.

Can someone help us to understand why this is happening?

Best Regards,

Margarida Castro

[DellSC]

A lot of this depends on how you limited the access to design mode.

In general, there are three types of access rights - Content, Application, and System/Data - that are applied in different parts of the system. The default access levels contain all three. However, when I'm designing security for my clients I generally create custom access levels that are specific to each type. So, for folders and reports, I'll use a Content access level, for Applications, such as Webi Designer, I'll use an Application access level, and for data objects, such as universes and connections, I'll use a System/Data access level.

Part of the trick to getting inheritance to work correctly is also to NEVER explicitly deny access to anything. Instead, there is the option to set a right to "not assigned". Explicitly denying access to something will override any access that is granted through a different access level. I suspect this may be what you're running into with this user.

-Dell