Security constraints prevent saving reports - report displayed as read-only

[tarunpratap]

Hi Community,

One of our users is unable to create new reports in ServiceNow.

the following message is displayed:

"Security constraints prevent saving reports - displaying report as read-only"

Details:
• The user can access Platform Analytics successfully.
• Analytics Overview, Dashboards, and Data Visualizations are visible.
• The user can open existing analytics content.
• The issue occurs when attempting to create or save a new report.

We would like to know:

1. Which roles are required to create and save reports in Platform Analytics?
2. Has anyone encountered this issue after upgrading to the Australia release?
3. Are there any ACLs, plugins, or security settings that could cause reports to be opened in read-only mode?
4. Is there a way to identify which specific security constraint is preventing the report from being saved?

Any guidance would be greatly appreciated.

Thank you.

[sandeepdutt]

Hi @tarunpratap ,

Users with any role can create visualizations in dashboards that they have editing rights to. They need access to the data that they wish to display. They can add data visualizations that have been shared with them to their dashboards. In the Visualization Designer, they can bookmark or export such visualizations, and if a visualization has been shared with them with sharing rights, they can share it with other groups and users. Specific roles are needed to create or edit visualizations in the Visualization Designer.

Users with any role can create dashboards and share them with groups, users, and roles. If a data visualization has been shared with them, they can add this visualization to their dashboards from the library. These users can share a dashboard that has been shared with them if sharing rights were also granted. They can pass along editing rights if granted.

Role name	Description	Contains Roles	Contained by roles (besides admin)
admin	Can create dashboards. Can create data visualizations in the Visualization Designer, which are automatically saved to the Library. Can edit, duplicate, share, and delete any dashboard and data visualizations. Can add filters to the filter library or edit or delete any filter. Has Usage Insights administrator privileges.	All other roles in this table	Not applicable
platform_analytics_admin	Role for administrative privileges in the Platform Analytics experience. This role includes administrative privileges for products and features that are part of Platform Analytics, including Performance Analytics and Usage Insights. Has the rights of all roles listed here except report_admin rights to Core UI reports. Equivalent to admin role from a security perspective.	analytics_admin analytics_categories_admin analytics_filter_admin dashboard_admin pa_admin par_scheduler viz_admin	None
analytics_admin	Role for Usage Insights administrative privileges	All other Usage Insights admin and viewer roles. For more information, see Roles installed with Usage Insights.	platform_analytics_admin
analytics_categories_admin	Role for creating, editing, or deleting category tags on dashboards.	None	platform_analytics_admin dashboard_admin
analytics_filter_admin	Role for editing or deleting any Platform Analytics filter. Can add filters to the filter library. For more information, see Filters in Platform Analytics.	None	platform_analytics_admin dashboard_admin pa_admin report_admin viz_admin
dashboard_admin	Can create, edit, duplicate, share, and delete any dashboard. These rights extend to both Platform Analytics and responsive dashboards. For more information, see Dashboard permissions. Can schedule the export of all dashboards on an instance. Can also delete scheduled exports.	analytics_filter_admin analytics_categories_admin sn_par_sche_export.par_scheduler_admin par_scheduler	platform_analytics_admim
now_assist_explorer_user	Can view the trigger point to start a AI Data Explorer exploration from data visualizations, Lists, or the ServiceNow Otto panel. Can edit an exploration. Can create a new exploration
pa_kpi_signal_admin	Can activate KPI Signals for an indicator. For more information, see Activate KPI Signals monitoring for an indicator (KPI).	None	None. However, pa_admin has the same privileges
pa_admin	Role for Performance Analytics administrative privileges. Equivalent to admin role from a security perspective.	viz_admin analytics_filter_admin All other Performance Analytics roles. For more information, see Performance Analytics roles.	platform_analytics_admin
par_scheduler	Can create and edit the scheduled email distribution of any dashboard or data visualization they can view or edit	None	sn_par_sche_export.par_scheduler_admin
sn_par_sche_export.par_scheduler_admin	Same as par_scheduler, but has full CRUD rights to the par_export table, including deletion	par_scheduler	dashboard_admin viz_admin
sn_process_optimization_analyst	Can configure a Process Mining map on a dashboard. For more information, see Configure a Process Mining map on a dashboard.	None	None
viz_creator	Can create data visualizations in the Visualization Designer, which are then available in the library. Can also edit, export, and share data visualizations in the Visualization Designer, if they own that visualization or have had it shared with them with the relevant rights. Can only delete visualizations that they created. Can share visualizations only with groups and users.	None	viz_admin (implicit) itil report_user
viz_admin	Can create data visualizations in the Visualization Designer, which are then available in the library. Can access all data visualizations in the library, either to add to a dashboard or open in the Visualization Designer. Can perform all actions in the Visualization Designer on any visualization. Can share a visualization with groups, users, or roles. Can schedule the export of all data visualizations on an instance. Can also delete scheduled exports.	analytics_filter_admin sn_par_sche_export.par_scheduler_admin Also includes the same privileges as viz_creator	platform_analytics_admin pa_admin pa_power_user
report_admin	As viz_admin, but can also create, edit, delete, and export all Core UI reports, including those on the Service Portal.	viz_admin analytics_filter_admin report_user

Reference : https://www.servicenow.com/docs/r/now-intelligence/platform-analytics-roles.html