Reporting by Roles/Groups

Feature requests Completed Features
,
1

Hi mates,

In the actual 5.2 version, the report interface is (good, but) available without any filter, from all reports profiles.
It would be great if we can create for example :

  • Role “KPI Customs” who have reports profiles only from groups “Customs”
  • Role “KPI Accounting” who have reports profiles only from groups “Accounting+Customs”
  • Role “KPI Workshop” who have reports profiles only from groups “Workshop”

To resume : have the sames filters “Available for the following roles” like the “overviews” section, but in the reporting section.
I know we can manage rights from roles, but we can’t manage views of reports profiles.
I think this feature request is same to this two ones, but one isn’t a feature request and the other is… empty.
https://community.zammad.org/t/reporting-only-by-group/1276
https://community.zammad.org/t/rollen-u-gruppenberechtigungen-role-and-group-authorization-fur-for-reports/188

Thanks team !

8 Likes
More detailed permissions for report profiles
More detailed permissions for report profiles
2

I would also like this feature/functionality very much!

3

I also need the same feature. We’d like to give typically one person in each group the ability to access reports but in the current implementation, it means that this person see the title of all tickets, even those he/she has no access to normally. For some ticket (like HR-related tickets), this may mean access to sensible information.

It would be nice, like in core workflows for example to be able to define a condition to access the report profile.

4

I’ve been searching how to do that but apparently there is no option for that. It would be great we have that feature.

5

We’re measuring the first articles likes. So if you want it you may want to vote it.

2 Likes
6

This topic was automatically closed after 416 days. New replies are no longer allowed.

7

Good news for everyone waiting on this: Report Profiles can now be limited to specific roles — exactly the “Available for the following roles” option this thread was asking for, copied from the overviews UX. It shipped with Zammad 7.0.

What you can do today:

  • In Admin > Manage > Report Profiles, each profile has an “Available for the following roles” multi-select.
  • If no role is selected, the profile stays visible to all users with the report permission (default, backward-compatible).
  • If one or more roles are selected, only members of those roles can see and use the profile — that is precisely the workflow from this thread: e.g. role KPI Customs sees only the Customs profiles, role KPI Accounting sees only the Accounting-related ones, and so on.
  • Combined with per-profile query conditions (the existing condition builder), you still control which tickets a profile reports on — so “which groups’ tickets” and “who may see the report” are both configurable, independently.

The admin documentation now recommends this as a data-hygiene measure as well:
“Be aware that granting users the report permission may leak information. Consider to limit the available profiles to specific roles, instead of just granting or not granting access to all profiles.”

From a user perspective I’d say this request is implemented. Please flag it if your exact setup differs (e.g. if you additionally need per-user restriction on report profiles beyond roles — the overviews have that, report profiles only have roles so far).