230 likes | 244 Views
Join presenter Sarah Rodger for an informative session on securing Informer 4. Learn about security hierarchy, common models, pitfalls to avoid, and troubleshooting tips. Discover how to secure custom export templates, dashboards, and more. Get insights on permissions versus sharing, and practical examples on user and group security settings. Don't miss this valuable opportunity to enhance your Informer security knowledge!
E N D
February 11-13, 2019 Raleigh, NC
Break Into Informer 4 Security Presenter: Sarah Rodger Informer Support Specialist
Agenda • What Can You Secure? • Informer Security Hierarchy • Common Models • Pitfalls to Avoid • Troubleshooting Tips • Q&A
What Can You Secure? • Custom Export Templates • Dashboards • Datasources / Databases • Mappings / Files / Tables • Properties / Fields / Columns • Row-level data (via plugin) • Reports (Informer & SQL) • Report Features (ex: Edit, Copy, Export, Delete) • System Controls and Settings • Archives
Permissions versus Sharing Sharing: who can see the report • Found on the Report Template page in the “Sharing” section • Can be Public, Private or Available only to groups and users listed Permissions: what they can do with it • Edit, copy, export, etc.
Informer Security Hierarchy If User/Group is not listed, they inherit the “EVERYONE” or “OWNER” defaults.
Where to Secure? • Security Tab: Select Users or Groups to secure • See Security > Root Permissions > Select Group or User affected. • Mappings Tab: Select object to secure • datasource -> Overview • mapping -> Overview • property - > Overview • Then click the “Permissions” Icon found top right. Select Group or User affected. • Report Template Tab: in the top right corner… if the user has permission to make changes
Example Example: “Report Runners” Group permissions for reports against the Informer Datasource Secured by User or Group • Go to: Security / Root Permissions / for Report Runners Secured by Data • Go to: Mappings / Datasource / Permissions / for Report Runners • User will need to logout/login to see permission changes.
Working with Users & Groups • Groups and Users • Local • LDAP • Combination • Security Tab: • Users: Add, Delete & Password Reset • Groups: Add, Delete & Edit Membership • LDAP: configure connection Only the local “administrator” account can Impersonate users
More Rules? Or More Exceptions? Two primary approaches: • Lock everyone out and modify to grant access • Lock no one out and modify to deny access Which results in fewer modifications?
Pitfalls to Avoid The most restrictive setting wins! Best practice is to assign users to a single group
Add Individual User to Permissions But don’t SAVE, Just review the defaults
Useful Help Center Articles • * Security Audit Report * • * Researching Permission Issues * • Managing Users and Groups • How Informer security works • Permissions • Principal Types • Using LDAP and Active Directory • How do I limit Informer access to users in a specific LDAP group?
February 11-13, 2019 Raleigh, NC