Risks associated with Report_Admin

[Stacy2]

In the past, I read where there are considerable risk with granting Report_admin to users.  One, that it alows them to modify tables. Two that it allows a user to post company data to the outside world.    

Now, I cannot find those articles from the past.  

Any pointers to risks associated with granting Report_Admin would be appreciated

Very Respectfully,

Stacy Whetzell

[Maharshi Chatte]

Hi ,

Report admin role will also give them the access to all the reports created in the instance and they will also be able to edit already created reports. Also they can create reports from other tables and view data in those tables.

Regards,

Maharshi

[Stacy2]

I have been told that Report_Admin allows users to edit tables.

I have found no document that states this, but a look at some of the ACLs seems to support that statement.

Does anyone know about that?

[Maharshi Chatte]

Only having report_admin role will not give you the access to edit tables. However if the report_admin role is added in the create/read/write acl of a particular table then only he will get the access to create/read/edit the table

Regards,

Maharshi

[Stacy2]

Thanks,

But does report_admin grant rights to do anything other than Read to other tables in the system?