Setting object rights for users and groups

Object rights enable you to set access levels for your users and groups. You control which folders, reports, and other objects users and groups can access using Crystal Enterprise. You set security settings at the object level. For objects that can be scheduled, the security settings are also reflected in the object instances object.

To facilitate administration, Crystal Enterprise includes a set of predefined rights ("access modes") that allow you to set common security levels quickly. These include the following:

• Inherited Rights
• No Access
• View
• Schedule
• View On Demand
• Full Control
• Advanced

In addition to setting user and group rights for report objects from the Objects management area, you can also set user and group rights at the folder level. When you set rights at the folder level, these limits will be in effect for all objects that inherit rights from the folder (including any objects found within the subfolders).

For detailed information on the different "access modes" for object rights and information on inherited rights, see Controlling users' access to objects.

To add groups or users to an object's rights settings

1. In the Objects management area of the CMC, select an object by clicking its link.
2. Click the Rights tab.

   The Rights tab appears.

3. Click Add/Remove.

   

4. Select an option in the Select Operation list.
5. Select the group(s) or user(s) you would like to add or remove.
6. Click the > arrow to add the group(s) or user(s); click the < arrow to remove the group(s) or user(s).
7. Click OK.

To change a group or user's report rights

1. In the Objects management area of the CMC, select an object by clicking its link.
2. Click the Rights tab.

   The Rights tab appears.

   

3. Change the access level for a group or user by selecting a right from the appropriate list in the Access Level column; then click Update.

   If you select Advanced from the list, you grant or deny granular rights from the Advanced Rights page. For more information, see Setting advanced object rights.