Setting rights for users/folders BO 4.2 SP5

[Former Member]

Hi people,

I am trying to set rights for folders in BO. I want specific users to have edit rights for specific reports and just view rights, or no view rights at all for other reports.

I have been reading a ton of manuals and SAP blog and forum posts, but I cannot seem to get it right.

Things I have done:

- Limit the root level user rights for the "Everyone" group by setting the "View Objects" to assigned in the advanced tab. I have unchecked the inherit boxes. I have set the same rights on the "Connections" and "Universes" part.

- I have given the user "View on demand" rights for the Finance folder. For the subfolder "Accounting", I have given the user "Full Control" rights. I have unchecked the inherit boxes.

The result is that the user will only see the Finance folder and it's subfolders. That's fine. However, when I open a report in the Accounting subfolder, the "Design" button is grayed out. Other users that I have given Full Control rights in their user profile, have the same Access level and are able to use the "Design" function.

In the CMC, "Acces Levels", "Full Control", "User Security", the rights are set as followed:

I'm obviously missing something here, some help or insight would be much appreciated!

Thanks in advance,

~Stephan

[former_member185603 · Accepted solution]

you need to give full control on Web intelligence, not view on demand.

[Former Member]

This seems to be the trick indeed. I have set the rights on full control at applications. After that I restricted rights on folder level. Thanks for the help, it's much appreciated!

[former_member185603]

Did you give the access to the group on the applications -> Web Intelligence as well?

[Former Member]

Yes, I have given them "View" rights.

[former_member185603]

Check if the view on demand rights has any "Deny rights". if you setup explicit deny, even if you give full control on sub folders, Deny will take precedence. So where ever you have deny rights, change it "Unassigned"

[Former Member]

Thanks for your response Jawahar. I have checked, but there are no settings on deny anywhere unfortunately.