Managing role-based access control in BMC Helix Dashboards

Important

The features and enhancements in this topic are under controlled availability to participating customers.

Roles and permissions are essential aspects of managing access to information and resources in any organization or system. They help to define the levels of access and actions that different users can perform depending on their position, responsibilities, and needs. By assigning specific roles and permissions, administrators make sure that users have the correct level of access to perform their jobs while maintaining the security and integrity of the system.

BMC Helix Dashboards provides the following roles: Viewer, Editor, Admin. As a tenant administrator, configure the role-based access control (RBAC) to delegate access permissions to users. Based on the assigned roles, users can access the complete or specific dashboard content. For more information about roles and permissions, see Roles-and-permissions.

Important

If the RBAC feature is enabled in BMC Helix Dashboards, the following out-of-the-box roles in BMC Helix Portal are affected:

- Reporting Admin and Reporting Editor are disabled.
- Reporting Viewer is renamed to Reporting Access.

In BMC Helix Dashboards, an administrator can assign the required system or custom roles to users with the Reporting Access role.

To assign custom or out-of-the-box roles to users and teams

On the dashboards Home page, in the main menu click and select Administration > Users and access > Roles.
The available roles are displayed.
Click the action menuthat corresponds to the out-of-the box role you want to assign to users or teams.
To assign a role to either user or teams:
1. Select either Manage users or Manage teams.
2. Search for the required users or teams.
3. Select the check boxes corresponding to the user names or teams.
Save the changes.

To create a custom role and assign permissions

As a tenant administrator, create custom roles to assign specific permissions, such as, create, view, or edit.

Example

You want to create a custom role and assign the permission to schedule reports to the role. Perform the following steps:

On the dashboards Home page, in the main menu click and select Administration > Users and access > Roles.
The available roles are displayed.
Click New Role.
Enter a name and an optional description for the role, for example, Report_Scheduler_Admin.
Click Create.
Under Administration, select the Manage reports scheduler permission.
By default, the View permissions under Dashboards and Folders are selected.
Click Save.

The role is created and displayed on the Roles page. A user with this assigned role can perform the following actions:

Delete reports
View the report history
Manage report settings
Create a report schedule

To delete a custom role

Make sure to remove all the users associated with the role to be deleted.
On the dashboards Home page, in the main menu click and select Administration > Users and access > Roles.
Click the action menu corresponding to the role that you want to delete and select Delete.
Click Delete role to confirm deletion.

List of permissions

The permissions available for users are listed in the following table:

Category	Permissions	Details
Dashboard	Create View Download	Create dashboards View permitted dashboards Download dashboards as pdf, xlsx, or csv
Folders	Create View	Create folders View permitted folders
Datasources	Explore	Use the explore mode for data sources
Calculated Fields	Create View	Create and updated calculated fields View created fields
Reports	Access View history View settings	View and create reports View reports history section View and manage report settings
Administration	Manage data sources Manage report scheduler	View and manage data sources Create, view, and manage all reports