PMO Reports: User Access Rights

ccppmop158
The User Access Rights report displays all access rights that are granted to a resource. The access rights can be granted directly to the resource, through a group, or through a resource OBS. The access rights granted include global, instance and OBS unit rights. The report also displays participant rights that are granted through the project. The following image displays the User Access Rights grouped by resource.
Image displaying the User Access Rights grouped by resource.
This report allows you to drill down to the User Access Rights Detail report by clicking an instance level right to view the instances to which the user has access. This drill down option is only available if the report is grouped by resource and it is only available for instance level rights, which include participant rights.
The following image displays the User Access Rights Detail report with the instances that the user can access.
Image displaying the User Access Rights Detail report with the instances that the user can access.
The following image shows another example of the report, grouped by Access Right. No drill down is available.
Image displaying another example of the report, grouped by Access Right.
Report Prerequisites
Complete the following prerequisites before you run this report:
  • The user must have a status of "Active" to display in the report. Users with a status of "Inactive" or "Lock" do not display in the report even if the active flag on the resource is checked.
  • Global access rights display if the user is granted at least one Global access right directly, through a group, or through a resource OBS unit used for access rights.
  • Instance access rights display if the user is granted at least one Instance access right directly, through a group, or through a resource OBS unit used for access rights.
  • OBS Unit access rights display if the user is granted at least one OBS Unit access right directly, through a group, or through a resource OBS unit used for access rights.
Report Properties
The following values list the report properties:
Name:
User Access Rights
Resource ID:
CSK_USR_AccessRights
Description:
Administration (PMO Accelerator)
Folder:
CA PPM/Reports/Administration/User Access Rights
Path:
/ca_ppm/reports/administration/CSK_USR_AccessRights
Data Source:
CA PPM Bean Data Source
Report Parameter Options
The following table lists the report parameter options.
Prompt Text
Parameter Name
Type
Input Control Name
Input Control Resource ID
Mandatory
Default Value
Resource OBS Type
resourceOBSTypeKeyRequired
Single-select
Query
Resource OBS Type
resourceOBSTypeKeyRequired
Yes
Resource OBS Unit
resourceOBSUnitKeyRequired
Single-select
Query
Resource OBS Unit
resourceOBSUnitKeyRequired
Yes
Resource Manager
resourceManagerKey_1
Multiple-select
Query
Resource Manager
resourceManagerKey_1
No
Primary Role
primaryRoleKey_1
Multiple-select
Query
Primary Role
primaryRoleKey_1
No
Resource
resourceKey_1
Multiple-select
Query
Resource
resourceKey_1
No
Employment Type
employmentTypeKey_1
Multiple-select
Query
Employment Type
employmentTypeKey_1
No
Access Right Type
accessRightType
Multiple-select
Query
Access Right Type
accessRightType
Yes
Global, Instance, OBS Unit
Access Right
accessRight
Multiple-select
Query
Access Right
accessRight
Yes
Group By 1
groupAccessRightResource
Single-select
List of Values
Group By 1
groupAccessRightResource
Yes
Resource
Group By 2
groupAccessRightType
Single-select
List of Values
Group By 2
groupAccessRightType
Yes
Access Right Type
Database Schema
ppmDBSchema
Hidden
Not applicable
Yes
Passed through
Clarity PPM
UI Theme
ppmUserUITheme
Hidden
Not applicable
Yes
Passed through
Clarity PPM
Language
ppmUserLanguage
Hidden
Not applicable
Yes
Passed through
Clarity PPM
User ID
ppmUser
Hidden
Not applicable
Yes
Passed through
Clarity PPM
Parameter Lookup Values
The following values list the lookup values:
Employment Type:
Contractor, Employee
Access Right Type:
Global, Instance, OBS Unit
Group By 1:
Access Right, Resource
Group By 2:
No Grouping, Access Right Type
Parameter Explanations
The following list describes the parameters:
  • The Resource OBS Type is a cascading parameter that determines which units are listed in the Resource OBS Unit parameter. This parameter does not directly control which resources display in the report.
  • The Resource OBS Unit parameter displays values based on the Resource OBS Type selected. When you select an OBS unit in this parameter, the report displays the resources attached to the OBS unit and descendants of the unit you select.
  • The Access Right Type parameter allows you to select which type of access right to include in the report. The following options are available:
    Global
    –The report displays global access rights granted through the resource, group, or resource OBS unit. 
    Instance
    –The report displays instance access rights granted through the resource, group, or resource OBS unit. 
    OBS Unit
    –The report displays OBS unit access rights granted through the resource, group, or resource OBS unit.
  • The report has a Group By 1 parameter that allows you to control how the report is grouped. The following group options are available:
    Access Right
    –This option groups the body of the report by access right name and description. The option allows you to display a list of all resources with a particular right. If you group the report by access right, there is no drill down to the User Access Rights Detail report.
    Resource
    –This option groups the body of the report by resource. If you group the report by resource, there is a drill down to the User Access Rights Detail report.
  • The report has a Group By 2 parameter that allows you to control how the report is subgrouped. The following subgroup options are available:
    No Grouping
    –This option does not group the report so you should select this value if you do not want to do a subgrouping.
    Access Right Type
    –This option does a subgrouping by access right type. The access right type subgroupings include: global, instance, and OBS unit. 
Report Fields and Calculations
If the report is grouped by resource, then the report displays the following columns: access right name, access right type, access right to OBS unit, granted through type, granted through, and access right description. The access right type does not display as a column if the report is subgrouped by this option. If the report is grouped by resource, the instance level rights drill down to the User Access Rights Detail report displaying the instance names to which the user has access.
If the report is grouped by access right, then the report displays the following columns: resource name, primary role, resource manager, access right type, access right to OBS unit, granted through type, and granted through. The access right type does not display as a column if the report is subgrouped by this option. The grouping displays the access right name and description. If the report is grouped by access right, the report does not drill down to the User Access Rights Detail report.
Users with a status of "Active" are included. Users with a status of "Inactive" or "Lock" are excluded. Resources only are included; roles are excluded.
This report contains the following columns:
Access Right To OBS Unit
–This column displays data if the Access Right Type is "OBS Unit". In this case, the column displays the OBS Type and Unit to which the user has access for the access right.
Granted Through Type
–This column displays how the access right is granted. The options include:
Resource
–The access right is assigned directly to the user.
Group
–The access right is assigned to a group and the resource belongs to the group.
OBS Unit
–The access right is assigned to a resource OBS unit and, depending on the OBS association mode, the resource is associated to the unit, an ancestor unit, or a descendant unit. The resource OBS must have the option set for "Used for Access Rights" (
Administration/Organization and Access/OBS
). If this option is checked, then the OBS units display an "Access Rights for this Unit" tab where you may assign rights to the OBS unit. Any resources belonging to the unit receive these rights, depending on the OBS association mode.
Granted Through
–This column displays the specific resource, group, or OBS unit through which the access right is granted.
Granted Trough Type Granted Through
Resource
–The resource name displays.
Group
–The group name displays.
OBS Unit
–The OBS type and unit name display.
Report Security
Security is determined by resource view rights.