What role is needed to click into a PA report?

[e_wilber]

We have a new dashboard created and our users are able to see the PA widgets but when they click into it to see the underlying data, they get the security restricted page. We have them pa_viewer and power_user role and they still can't see anything when they click into a widget.

Is there another role that they need?

[Dr Atul G- LNG]

Hi @e_wilber 

The ACL is on the table on which this report has been build, user dont have required role to access that table and getting the ACL error. 

[AndersBGS]

Hi @e_wilber ,

Two possibilities.

1. As @Dr Atul G- LNG  already have mentioned - do the users have access to the underlying table and columns? 
2. Have you verified from Indicator level, that there has been set a restricted access? 

If my answer has helped with your question, please mark my answer as accepted solution and give a thumb up.

Best regards

Anders 

[swathisarang98]

Hi @e_wilber ,

It looks like the user doesn't have access to data shown in the report rather than PA access , so check on which table the report is created and check acl for that table and if any role is mentioned give that to user and try .

Still if it doesn't Below are some of the roles related to PA please go through it,

Role Authorizations Typical persona

No role	View Performance Analytics visuals on the Service Portal. View dashboards that have been shared with this user. Some dashboards require a subject matter related role for viewing, such as sn_hr_core_basic for the HR Agent dashboard. Dashboard owners and administrators can also restrict dashboard access by role. For more information, see Dashboard permissions.	Requester who does not need any access to Performance Analytics beyond certain visualizations of results
Any role (not necessarily a Performance Analytics role)	Create dashboards. Restrict access by role to a dashboard they create. Share dashboards they own.
pa_viewer Contained by: All roles except pa_contributor	Before Quebec, this role was necessary for the following actions. It may still be necessary on upgraded instances. View Analytics Hub . Create personal thresholds and targets for indicators. Read, Update, and Delete thresholds and targets that they created. View text analytics widgets on dashboards.	Requester who needs and understands the details of key performance indicators
sn_pa_diagnostics.pa_diagnostic Contained by: pa_admin	Read from the Diagnostics tables. Activate or deactivate a diagnostic. Run diagnostics. Delete message records and diagnostic logs.	No specific persona, but this role would typically be assigned to individual business analysts or groups of fulfillers.
pa_contributor Contained by: pa_power_user, pa_admin	For indicators for which the user is designated as a Contributor: Read and update scores in scoresheets. View the Analytics Hub. This user can also read dashboards that have been shared with them.	No specific persona, but this role would typically be assigned to individual fulfillers or groups, who are allowed to set indicator scores manually
pa_kpi_signal_admin Contained by: admin	Enables the user to dismiss a signal or reset the baseline for KPI Signals.	Process owner who also has some training in Performance Analytics. Also needs the pa_viewer role.
pa_target_admin Contained by: pa_power_user, pa_admin	Create targets. Read, update, and delete all targets, including those that they do not own. Assign targets to indicators.	Manager who knows what targets to set but may not have any further input to Performance Analytics
pa_threshold_admin Contained by: pa_power_user, pa_admin	Create global thresholds. Read, update, and delete all thresholds, including those that they do not own. Assign thresholds to indicators.	Manager who knows what thresholds to set but may not have any further input to Performance Analytics
pa_analyst Contained by: pa_power_user, pa_admin	CRUD text analytics keywords, phrases, and stop words Read indicator sources.	No specific persona, but this role would be assigned to individual fulfillers or groups whose expertise includes keywords, phrases, and stop words for word clouds.
pa_power_user Contained by: pa_admin The pa_power_user role contains the pa_viewer, pa_contributor, pa_target_admin, pa_analyst, and pa_threshold_admin roles.	CRUD indicators and breakdowns. CRUD widgets Add Performance Analytics widgets to dashboards. CRUD text index configurations for text analytics. CRUD bucket groups. CRUD indicator groups	Business analyst. Understands the business use cases for Performance Analytics and the requirements for indicators and breakdowns.
pa_data_collector Contained by: pa_admin	CRUD, schedule, and run data collection jobs CRUD indicator and breakdown sources Read some system properties CRUD system units CRUD scripts and automated notifications CRUD bucket groups	Technical expert who understands the underlying database record structure of Performance Analytics
pa_admin The pa_admin role contains the pa_power_user, sn_pa_diagnostics.pa_diagnostic, and pa_data_collector roles.	Read Performance Analytics properties. Access Admin Console Launch Dependency Assessment	Performance Analytics technical expert who also understands business needs.
admin	The system administrator role. Users with the admin role can perform all pa_admin functions, edit properties, create database views, CRUD any dashboard, and assign ownership to dashboards.	System administrator

Spotlight roles

 Role Authorization Typical persona

pa_spotlight Contains: pa_viewer, pa_spotlight_copy_breakdown	CRUD Spotlight groups and criteria.	Expert who understands the business logic of what records require reminders.
pa_spotlight_viewer	Access to the dashboards from the Analytics and Reporting Spotlight Solutions.	Fulfiller who needs more than simple Priority setting to remind them of records that require action.
pa_spotlight_copy_breakdown	Can copy Spotlight groups to multiple elements of a breakdown.	Spotlight expert or business analyst who understands the applicability of a Spotlight group by breakdown element.
pa_spotlight_copy_domain	Can copy Spotlight groups to multiple domains	Domain administrator with Performance Analytics expertise

Servicenow Docs:

https://docs.servicenow.com/bundle/washingtondc-now-intelligence/page/use/performance-analytics/refe... 

Please mark this comment as Correct Answer/Helpful if it helped you.

Regards,

Swathi Sarang