Setting object rights for users and groups

Object rights enable you to set access levels for your users and groups. You control which folders, reports, and other objects users and groups can access using Crystal Enterprise. You set security settings at the report object level—these settings are reflected in the instances for the report object.

To facilitate administration, Crystal Enterprise includes a set of predefined rights ("access modes") that allow you to set common security levels quickly. These include the following:

• Inherited Rights
• No Access
• View
• Schedule
• View On Demand
• Full Control
• Advanced

In addition to setting user and group rights for report objects from the Objects management area, you can also set user and group rights at the folder level. When you set rights at the folder level, these limits will be in effect for all objects that inherit rights from the folder (including any objects found within the subfolders).

For detailed information on the different "access modes" for object rights and information on inherited rights, see Object rights overview.

To add groups or users to an object's rights settings

1. In the Objects management area of the CMC, select a report object by clicking its link.
2. Click the Rights tab.

   The Rights tab appears.

3. Click Add/Remove.

   

4. Select an option in the Select Operation list.
5. Select the group(s) or user(s) you would like to add or remove.
6. Click the > arrow to add the group(s) or user(s); click the < arrow to remove the group(s) or user(s).

   Tip:    

   • To search for a specific user or group, use the Look For field.
   • If there are many users or groups on your system, click the Previous and Next buttons to navigate through the list of folders.
7. Click OK.

To change a group or user's report rights

1. In the Objects management area of the CMC, select a report object by clicking its link.
2. Click the Rights tab.

   The Rights tab appears.

   

3. Change the access level for a group or user by selecting a right from the appropriate list in the Access Level column; then click Update.

   If you select Advanced from the list, you grant or deny granular rights from the Advanced Rights page. If this page doesn't appear automatically after you click Update, click the Advanced link (in the Net Access column). For more information, see Setting advanced object rights.