416.467.9100 | Dundas Data Visualization | Login
Welcome Guest
This is the support page for the legacy Dundas Dashboard application. For assistance with the current Dundas BI application please click here.
Dashboard v5.5

This site makes extensive use of JavaScript.

Please enable JavaScript in your web browser and reload the page before proceeding.

Managing Users

Hide navigation
RSS
Modified on Wed, 02 Dec 2015 06:16 PM Categorized as Administration, Open APIs
Click to return to: Documentation | Installing and Administering Dundas Dashboard | Administration


Overview

Click the Administration tab in the Sidebar to add, edit or delete user accounts from Dundas Dashboard.

Dundas Dashboard supports the following types of accounts:

  • Local User — A local user's credentials are stored and managed within Dundas Dashboard.
  • Windows User — A Windows domain user can log in to Dundas Dashboard via Windows Authentication.
  • Windows Group — A Windows group account lets anyone in the Windows group access Dundas Dashboard.

Administration sidebar.

Administration sidebar.


Adding a Local User

Local users have their credentials stored in Dundas Dashboard. You can create them as needed to control access to Dashboard features and to organize work.

To add a Local user:

  1. Hover over the User Accounts folder with your mouse, then click the menu button to its right. The User Accounts menu is displayed.
    The User Accounts menu.
  2. From the menu, choose Add Local User. The Editing Account: New Account screen is displayed.
    The General tab.

Provide the information required by the Editing Account screen as follows.

Step 1 - Enter general account information

The General tab of the Editing Account screen lets you enter general account information and specify privileges for the account.

Enter the information in the General tab as follows:

  1. Type the username in the Username box. Note that local user account names are case insensitive.
  2. Type a password for the account in the Password box.
  3. Re-type the password in the Confirm password box.
  4. Enter the user's first name in the First name box.
  5. Enter the user's last name in the Last name box.
  6. Provide the user's email address in the Email address box.
  7. Choose the language for this user account. The available choices depend on the translations installed on your Dundas Dashboard instance.
  8. Set the default view which is displayed when the user logs in. You can set it to the Home screen or choose a specific dashboard to show instead.
  9. Configure privileges for this account:
    • If the new account should be allowed to perform administrative operations, check the corresponding Granted checkbox. This will allow the user to manage accounts, security groups, projects, shared resources, units, notifications, and more.
    • If the new account can create notifications, subscribe to notifications or subscribe other users to notifications, check the corresponding Granted checkboxes.
    • Grant or deny the user access to the listed viewer/toolbar operations as desired. For example, you can use these privileges to control whether the user sees the corresponding toolbar button or not in the viewer. If a privilege is neither granted nor denied, the user will inherit the corresponding privilege from its parent security group (e.g., the Everyone group, which is granted all viewer/toolbar privileges by default).
  10. Configure security options:
    • If the new account should be disabled when it is created, select the “Account is disabled” checkbox. Disabled accounts cannot log in to the system, and they do not consume any licenses.
    • If you want to prevent the user from changing their password, select the “User cannot change password” option. Note that this setting is ignored if password changes have been disabled globally via the Dundas Dashboard configuration file.
  11. Click the Save button in the Toolbar to create the new user account.
    Image

The User Accounts folder item shows the total number of accounts in the system (&ie; in brackets). If you hover over the folder name with your mouse, you can view a tooltip that displays the number of local user accounts, Windows user accounts and Windows group accounts.

User Accounts folder tooltip.

User Accounts folder tooltip.


Hover with your mouse over a specific user to see information such as:

  • Username
  • Display name (concatenation of First and Last name or Display name in Windows)
  • Email address of user
  • Type of user account
  • Whether the user account is enabled
  • Number of logins made by this user
  • When this user last logged in to the system.

User account tooltip.

User account tooltip.


Step 2 - Choose a role

Use the Roles tab of the Editing Account screen to change a user's role. By default, a user can only view existing dashboards. There are three types of roles:

  1. Viewer - May view existing dashboards. This is the default role for new accounts. The checkbox option “Reserve a viewer license for this user” determines whether this will be a named viewer or a floating viewer account:
    • To make this a named viewer, select the checkbox option. In this case, the user will always be permitted to log in to view dashboards. This will also use up one viewer license. However, only one login session is permitted for this account at any time which means that the user cannot log in simultaneously from different computers.
    • To make this a floating viewer, leave the option unchecked. In this case, the user can view dashboards as long as there is still a viewer license available (e.g. the viewer licenses haven't all been used up by other named or floating users). Unlike named users, a floating viewer user can actually be logged in simultaneously from multiple computers (as long as there are enough viewer licenses).
    • If the number of viewer licenses is unlimited, the checkbox option has no effect (&ie; no license will be reserved) as all viewers are treated as floating viewers.
  2. Dashboard Designer - May create, view, edit and delete dashboards only.
  3. Dashboard Developer - May be granted privileges for working with business objects. This is the role given to the default administrator. Dashboard Developers can have one or more of these privileges:
    • Data Connector Analyst - May create, view, edit and delete data connectors.
    • Virtual Data Structure Analyst - May create, view, edit and delete virtual tables and virtual cubes.
    • Dimension Analyst - May create, view, edit and delete dimensions.
    • Business Metrics Analyst - May create, view, edit and delete business metrics, such as KPIs and datasets.
    • Dashboard Analyst - May create, view, edit and delete dashboards.

Tip: All roles include the Viewer role.

Read the Licensing document for more information about how these roles are related to Dundas Dashboard's licenses.

Note: Disabled accounts do not consume any licenses.

The Roles tab.

The Roles tab.


To change the role for a new or existing user account:

  1. In the Editing Account screen, click the Roles tab.
  2. Select one of the following roles:
    • Viewer
    • Dashboard Designer
    • Dashboard Developer
  3. If you chose the Dashboard Developer role, additionally select one or more privileges from among these choices:
    • Data Connector Analyst
    • Virtual Data Structure Analyst
    • Dimension Analyst
    • Business Metrics Analyst
    • Dashboard Analyst
  4. Click the Save button from the Toolbar to save your changes.

If the changes were made to your own Dundas Dashboard user account, you will need to log out and log in again for the changes to take effect.

Step 3 - Configure security group membership

User accounts can be added to existing Security Groups to make it easier to control access to business objects (such as KPIs and dashboards) and other application elements. For information on securing project items, see Project Item Properties.

By default, Dundas Dashboard is configured with the Everyone security group - all Dundas Dashboard users are members of this group.

The Groups Containing This Account tab.

The Groups Containing This Account tab.


To add a user to an existing Security Group:

  1. In the Editing Account screen, click the Groups Containing This Account tab.
  2. Select the desired group in the All Security Groups list on the left.
  3. Click the Add button to add the group to the list on the right. Repeat these steps as necessary.
  4. Click the Save button in the toolbar to apply your changes.

To remove a user from a Security Group:

  1. Select the group (that the user should be removed from) in the Groups Containing Account list on the right.
  2. Click the Remove button. Repeat these steps as necessary.
  3. Click the Save button in the toolbar to apply your changes.

Step 4 - Give the account access to projects

Click the Project Access Rights tab in the Edit Account screen in order to give the new account access to Dundas Dashboard projects. Note that this tab becomes accessible only after you have created the new user account (&ie; by clicking Save in the toolbar).

The tab lists each project in the system and lets you choose one or more access levels (None, Read, Write, or Full Control) to apply to the user account. If you don't want to change the access level for a particular project, set the corresponding New Access Level dropdown list to No Change.

Once you have made your access level selections, click Save to apply the changes. Note that access levels and their corresponding permissions will be applied recursively to all child items within each chosen project. Effectively, this tab offers a centralized and quick way to reset a user's permissions on a project and all of its children (including dashboards).

Note that the Dundas Dashboard administrator user always has Full Control over all projects.

The Project Access Rights tab.

The Project Access Rights tab.


Tip: You can also configure permissions/access levels for the current project in the Design Explorer via the Project Properties dialog. Or, if the current user account needs greater permissions on a specific child item (such as a dashboard) within a project, you can override its permissions by accessing the Properties dialog of the item from the Design Explorer and using the Security tab to add/update permissions for the user.

Step 5 - Add custom attributes

A custom attribute is a name-value pair which you can associate with a specific user account (or security group). Custom attributes can be used at the data connector or virtual table stage to allow for data filtering based on the user who is logged in to Dundas Dashboard. Dashboard interaction scripts and custom data providers (via extensibility APIs) can also access custom attributes. Attribute names are not case-sensitive.

For more details, see Using Custom Attributes.

The Custom Attributes tab.

The Custom Attributes tab.


Adding a Windows User

Users from a Windows domain can be given access to Dundas Dashboard using their domain credentials. This Windows domain can be different than the Dundas Dashboard server computer's domain but note the following requirement.

Note: Important: The account under which the Dundas Dashboard server application is running must have read and search access to the Active Directory servers for each domain for each Windows user or group account. Failure to provide adequate access may cause the login of these accounts to fail.

To add a Windows domain user:

  1. Click the menu button on the User Accounts folder. The User Accounts menu is displayed.
    The User Accounts menu.
  2. Choose Add Windows User from the menu. The General tab of the Editing Account: New Account screen is displayed.
    Adding a domain user.
  3. Enter the user's domain and user account name in the appropriate fields.
  4. Choose a language for the account.
  5. Set the default view which is displayed when the user logs in. You can set it to the Home screen or choose a specific dashboard to show instead.
  6. Configure privileges for this user:
    • If the new account should be able to perform administrative operations, check the corresponding Granted checkbox. Administrator accounts can manage users, security groups, projects, shared resources, units, notifications, and more.
    • If the new account can create notifications, subscribe to notifications or subscribe other users to notifications, check the corresponding Granted checkboxes.
    • Grant or deny the user access to the listed viewer/toolbar operations as desired.
  7. If the new account should be disabled when it's created, check the “Account is disabled” checkbox. Disabled accounts cannot log in to the system.
  8. Choose a role for this user by following the same steps as for a Local User.
  9. Configure security group membership for this user.
  10. Give this account access to Dundas Dashboard projects.
  11. Add custom attributes to this account.
  12. Click the Save button in the toolbar to add the domain user account.
    Image

Note: In order for the newly added Windows user to be able to log in to Dundas Dashboard, Windows Authentication must be enabled through the Dundas Dashboard Configuration File. See the article, Using Windows Authentication to Access Dundas Dashboard.

Adding a Windows Group

Groups from a Windows domain can be given access to Dundas Dashboard using their domain credentials. This Windows domain can be different than the Dundas Dashboard server computer's domain but note the following requirement.

Note: Important: The account under which the Dundas Dashboard server application is running must have read and search access to the Active Directory servers for each domain for each Windows user or group account. Failure to provide adequate access may cause the login of these accounts to fail.

By giving a Windows group access to Dundas Dashboard:

  • Any user in the group can access the Dundas Dashboard system. If someone is removed from the group, so is their access.
  • Users in the group can log in to Dundas Dashboard using their domain credentials.
  • Users in the group have implicit accounts in Dundas Dashboard, they don't need to be added individually to the system.

Tip: Add the “Domain Users” group to quickly give everyone access to Dundas Dashboard.

Note: Important: By default, Dundas Dashboard does not support nested Active Directory (AD) groups. When you add a new Windows group, only users who are direct members of the group are added. Users within any subgroups or nested groups are not added. However, in Dundas Dashboard 5 or later, there is a new experimental activeDirectoryBindingMode option in the Dundas Dashboard Configuration File that enables support for nested AD groups.

Users within a Windows group must belong to the same domain as the group. If the group contains users from other domains (⪚ in a trusted domain relationship), these users will not be able to log in to Dundas Dashboard.

To add a Windows domain group:

  1. Click the menu button on the User Accounts folder. The User Accounts menu is displayed.
    The User Accounts menu.
  2. Choose Add Windows Group from the menu. The General tab of the Editing Account: New Account screen is displayed.
    Adding a domain group.
  3. Enter the group's domain and group name in the appropriate fields.
  4. Choose a language for the account.
  5. Set the default view which is displayed when a user from this group logs in. You can set it to the Home screen or choose a specific dashboard to show instead.
  6. Configure privileges for this account:
    • If the new account should be allowed to perform administrative operations, check the corresponding Granted checkbox.
    • If the new account can create notifications, subscribe to notifications or subscribe other users to notifications, check the corresponding Granted checkboxes.
    • Grant or deny the group access to the listed viewer/toolbar operations as desired.
  7. If the new account should be disabled when it's created, check the “Account is disabled” checkbox. Disabled accounts cannot log in to the system.
  8. Choose a role for this account by following the same steps as for a Local User.
  9. Configure security group membership for this account.
  10. Give this account access to Dundas Dashboard projects.
  11. Add custom attributes to this account.
  12. Click the Save button in the Toolbar to add the domain group account.
    Image

Editing a user

To edit an existing local user, domain user or domain group account:

  1. Expand the User Accounts folder and locate the account item (⪚ local user, Windows user, or Windows group) that you want to edit.
  2. Click the account item's menu button.
  3. From the menu, choose Edit.
  4. Modify the account's general information, role, and security group membership as necessary.
  5. Click the Save button in the Toolbar to apply your changes.
    Image

Deleting a user

To delete an existing local user, domain user or domain group account:

  1. Expand the User Accounts folder and locate the account item (⪚ local user, Windows user, or Windows group) that you want to delete.
  2. Click the account item's menu button.
  3. From the menu, choose Delete.
  4. Click Yes when prompted to confirm the operation.

Note: Deleting a user will also close any open Dashboard sessions associated with that user.

Log out a user

To log out a user:

  1. Expand the User Accounts folder and locate the account item (⪚ local user, Windows user, or Windows group) that you want to log out.
  2. Click the account item's menu button.
  3. From the menu, choose Logout User.
  4. Click Yes when prompted to confirm the operation.

This operation will terminate all active sessions for the user. In the case of Windows Group accounts, this will terminate all sessions for all users within that Windows Group.

You can also access this operation from the View Full List screen.

Viewing the full list of users

In the Administration tab, if there are too many users listed under the User Accounts folder, only a partial list of users will be presented and you must click the last More... item in the folder to see the full list of user accounts. You can also access the full list directly at any time as follows:

  1. Select the User Accounts folder and do a right-click.
  2. From the menu select View Full List.
    View full list.
  3. The full list of user accounts is displayed in a grid with options to search for users, edit a specific user, delete a user, or log out a user.
    Viewing the full list of user accounts.

Notes

  • If a user's Windows account changes its Windows group membership after accounts/groups have been set up in Dundas Dashboard, note that this change cannot be detected by the Dundas Dashboard application as the change happens externally. Thus, Dundas Dashboard does not know it should refresh its internal cache by re-reading the account/group relationships. However, there is a workaround which is to rename any object, such as a dashboard, in the Design Explorer. This will cause the internal cache in Dundas Dashboard to be invalidated, allowing the account/group information to be refreshed.
  • When saving a new named viewer account, floating viewers who are logged in may be automatically logged out as needed so that the current viewer license limit is not exceeded.

API references

Creating custom account provider add-ons:


Administering accounts on the server:


Related topics

About Dundas | Contact Us Follow us on Twitter! | Privacy Statement | Report Site Issues

Copyright © 2009-2016 Dundas Data Visualization, Inc.