Update the Permissions setting so that Unarchive and create Data Models or Reports can be separated

bishal.d

USE CASE AND BUSINESS NEED:

Currently, we provide the access to Unarchive from Administration > Manage Privileges, in the BI Catalog and if the Permission is defined as “Write” for a folder, for the particular user or a particular role that is assigned to the user, then the user gets access to unarchive under the same folder.

But our business requirement is as follows:

We have three separate roles which should provide different access as follows:

BI Personal Folder JR: This role should allow the user to create Data Model and Report from scratch in My Folder, but they should not be able to create Data Model and Report in any folder under Shared Folders > Custom.

BI Report Migration JR: This role provides access to the Archive and Unarchive options under both My Folder and any folder under Shared Folders > Custom.

BI Data Model Developer JR: This role provides access to create Data Model and Report in any folder under Shared Folders > Custom.

Now for example, a user who has the role “BI Personal Folder JR” in combination with “BI Report Migration JR” should be able to create Data Models, Reports and have access to Archive and Unarchive in My Folder. But the same user should not have access to create Data Models and Reports from scratch in any folder under Shared Folders > Custom, but they should be able to Archive and Unarchive Data Models or Reports. For this, it would be helpful if we could separate the users who can just unarchive pre-built Data Models or Report from the lower environment to the Production environment without getting access to create data models in the Shared Folders > Custom or any folder under custom, but the same user should have access to create data models and reports under My Folder.

ENHANCEMENT REQUEST:

By updating the relation to Unarchive access and “Write” Permission setting, the above requirement can be achieved.

The enhancement request would be to separate the relation between Unarchive access and the Write setting in the Permissions or create a separate Permission setting option specific to Archive and Unarchive, so that we can separately provide access (without being dependent on the "Write" permission) to 'Unarchive or Archive' and 'Create Data Models or Reports' under Shared Folders > Custom. This way we can manipulate the settings so that certain user cannot create Data Model or Reports in any folder under Shared Folders > Custom (even if they have the roles to do so in My Folder) but are able to Unarchive pre-built Data Models or Reports from the lower environments to the Production environment.