How to check which users have the report create role

[Paul Bayani]

How to check which user has the create report permission. 

When I check the report_user role, the "Users" tab is blank so I'm assuming no one in the instance can create a report. But upon doing some random checking with few HR agents, there are some who can actually create a report. 

So not sure what I'm missing here.

[Kiel Sanders]

sys_user_has_role is the table that the Users tab from your first screenshot is based on. It contains a record for every user-role relationship. If you find that multiple roles are granting access to create reports, this table will allow you to filter to all users with access to one of those roles and which role(s) they have.

The view you are displaying is the table definition. I would recommend viewing the actual table list view. Typing sys_user_has_role.list into the filter navigator will bring you to the list view of the table's contents.

[Paul Bayani]

Got it Kiel, thanks so much. 

Now, in test I did add one HR agent who does not have a create report permission by adding the sn_hr_core.basic role to the user. However, the create report permission is still not added because the create a new report module is not yet seen from the HR agent's end.

I did check the inherited currently set as false. Should this be changed to true? what does "inherited" mean? Thanks.

 

[Kiel Sanders]

Inherited means that they inherited that role through either a group or another role. Adding sn_hr_core.basic causes the user to gain a lot of additional roles which are the ones indicated as True.

Can you view the sn_hr_core.basic role and confirm that a report creator role is expected to be inherited? Some of the confusion could also be because we added the sn_hr_core.report_creator role to sn_hr_core.basic in the New York release. If you are expecting the basic role to have reporting access due to past replies on this thread, it may be different for you if you are not on the New York release. You can read more in our New York HRSD Release Notes.

[Paul Bayani]

@Kiel Sanders  here's what I see when I view sn_hr_core.basic role (these are all the roles in the sn_hr_core.basic role. In terms of Module, here's what I see.

[Kiel Sanders · Accepted solution]

Yes, that's expected if you are not on New York and also if you're experiencing someone with sn_hr_core.basic not being able to create reports. You can find all of the roles that allow the creation of reports by looking at the ACLs for create on sys_report. Below are the defaults you should see.

If you're still looking to identify why some users are able to create reports, look for these roles on the sys_user_has_role table. You should notice the users you tested with will appear with these role filters applied.