Access to KPI Composer
Summarize
Summary of Access to KPI Composer
Access to KPI Composer in ServiceNow determines what users can do with KPI Composer projects, including creating, editing, viewing, and accessing underlying records. Access is controlled through user roles, project responsibilities, and sharing settings, either individually or combined.
Show less
User Roles and Their Permissions
- KPI Composer Admin (snkpicomposer.admin or admin, paviewer): Has full access to all KPI Composer components and projects, including the ability to share projects, assign responsibilities, and link indicator and breakdown definitions with Performance Analytics entities.
- KPI Composer User (snkpicomposer.user): Can only access projects they created or those shared with them. They can share or assign responsibilities for their own projects and access design tabs and properties but cannot associate definitions with Performance Analytics indicators or breakdowns without additional roles.
Responsibilities for Projects
Users designated as responsible for a project can view, edit, share, and assign responsibility for that project with similar permissions as KPI Composer users but independent of their role. Being responsible implies oversight and implementation duties. Responsible users are specified in project properties and can be assigned by any user with edit rights.
Project Sharing and Access Levels
- Edit Access: Equivalent to responsible users or KPI Composer users but does not require specific roles and does not imply responsibility for the project.
- View Access: Allows users to read all design elements and use viewing tools but prohibits any changes except adding journal entries.
Sharing projects enables flexible collaboration by granting appropriate access without altering roles or responsibilities.
The level of access to KPI Composer determines whether a user can create, edit, or only view a KPI Composer project. It also determines which projects a user can access and whether they can access the underlying records or only the UI.
- User role
- Responsibility
- Access granted during sharing
Role-based access
| Role | Contains | Description |
|---|---|---|
| sn_kpi_composer.admin or admin | pa_viewer |
|
| sn_kpi_composer.user | None |
A user with this role may have access to more projects based on responsibility or on projects being shared with them. |
The appropriate Performance Analytics roles are also necessary to implement KPI Composer designs in Performance Analytics.
Responsibility for projects
- Can view and edit the projects.
- Can share or assign responsibility for the projects.
- Can access only the design tabs, artifact properties, indicator definitions, and breakdown definitions of those projects.
- Cannot add Performance Analytics indicators or breakdowns to the respective definitions.
This level of access is equivalent to what the sn_kpi_composer.user role grants. It is also equivalent to having a project shared with edit rights. Responsibility differs first in being independent of any role. The second difference is procedural, not technical: Responsible users are understood to be in charge of oversight and implementation of the project. Even the creator of a project is therefore not automatically responsible for it.
Responsible users are named in the project properties. Any user with edit rights can name responsible users. For more information about naming responsible users, see Define properties for a project.
Shared projects
Any user with edit rights can share a project. When you share a project, you grant one of two levels of access:
- Edit access
- This level of access is technically the same as the access of a responsible user, or a user with the sn_kpi_composer.user role. The first difference is that no role is required. The second difference is that there is no implication of responsibility to oversee or implement the project.
- View access
- A user with view access can read the design tabs, artifact properties, indicator definitions, and breakdown definitions of the shared project. They can use all viewing utilities, like search and filter. However, they cannot change anything in the project. The only thing they can add is a journal entry.
For more information, see Share a KPI Composer project.