Platform Analytics Indicator Access Control not granting correct access issues

[trangdan106]

Hello everyone, I have configured an indicator with access control which restricted to only users with "admin" role. However, other users with snc_internal role can see it in the library, they can't see it in the Library but if I have the link, they can still access it.

[Vikram Reddy · Accepted solution]

Hi @trangdan106,

Stop treating the indicator's Access control tab as a hard security boundary, because it isn't one. It governs whether the indicator shows up in the Library and Analytics Hub listing, not whether someone with a direct URL can pull its scorecard. That mismatch (restricted in the list, still reachable by link) has been reported by others on this same forum around indicator and dashboard access control, with no fix confirmed yet.

• Visible by all roles: unchecked in your screenshot, which is correct, otherwise the Roles list gets ignored entirely.
• Roles field: admin only, that part is configured fine for the library view.
• sys_security_acl on pa_scorecards and pa_indicators: this is the layer that actually needs to block direct/API access, the indicator config alone won't.

Thank you,
Vikram Karety
Octigo Solutions INC

[trangdan106]

Probably, due to how my company set this thing up because I have added the roles so only those with admin can see the indicator in the library but user without the admin can access the library and see the indicator that was supposed to be blocked as well.