February 11-13, 2019 Raleigh, NC

Break Into Informer 4 Security Presenter: Sarah Rodger Informer Support Specialist

Agenda What Can You Secure? Informer Security Hierarchy Common Models Pitfalls to Avoid Troubleshooting Tips Q&A

What Can You Secure? Reports (Informer & SQL) Custom Export Templates Report Features (ex: Edit, Copy, Export, Delete) System Controls and Settings Archives Custom Export Templates Dashboards Datasources / Databases Mappings / Files / Tables Properties / Fields / Columns Row-level data (via plugin)

Permissions versus Sharing Sharing: who can see the report Found on the Report Template page in the “Sharing” section Can be Public, Private or Available only to groups and users listed Permissions: what they can do with it Edit, copy, export, etc.

Informer Security Hierarchy If User/Group is not listed, they inherit the “EVERYONE” or “OWNER” defaults.

Where to Secure? Security Tab: Select Users or Groups to secure See Security > Root Permissions > Select Group or User affected. Mappings Tab: Select object to secure datasource -> Overview mapping -> Overview property - > Overview Then click the “Permissions” Icon found top right. Select Group or User affected. Report Template Tab: in the top right corner… if the user has permission to make changes

Example Example: “Report Runners” Group permissions for reports against the Informer Datasource Secured by User or Group Go to: Security / Root Permissions / for Report Runners Secured by Data Go to: Mappings / Datasource / Permissions / for Report Runners User will need to logout/login to see permission changes.

Working with Users & Groups Groups and Users Local LDAP Combination Security Tab: Users: Add, Delete & Password Reset Groups: Add, Delete & Edit Membership LDAP: configure connection Only the local “administrator” account can Impersonate users

Best Practices: Group by Job Function

Better: Data Access & Job Function

More Rules? Or More Exceptions? Two primary approaches: Lock everyone out and modify to grant access Lock no one out and modify to deny access Which results in fewer modifications?

Pitfalls to Avoid The most restrictive setting wins! Best practice is to assign users to a single group

Don’t Use Overly Complex Model

Do Create Specialized Groups

Troubleshooting Tips

Add Individual User to Permissions But don’t SAVE, Just review the defaults

Run Security Audit

Run Security Audit

Run Security Audit

Useful Help Center Articles * Security Audit Report * * Researching Permission Issues * Managing Users and Groups How Informer security works Permissions Principal Types Using LDAP and Active Directory How do I limit Informer access to users in a specific LDAP group?

Thank you! Any questions?

February 11-13, 2019 Raleigh, NC