Introduction

By default, no one has access to Elastic reports, including HelloID administrators. To start using reports, you must perform the following steps:

1. Grant all HelloID administrators, including your own account, access to the Elastic reporting section.
2. Grant other users and/or groups access to the Elastic reporting section.
3. Grant specific groups access to specific collections of reports ("spaces").

This article will walk you through the process.

Also see:

• Elastic Reports - Overview

Elastic reporting access

Required: Grant Elastic access to HelloID administrators

1. Create a HelloID group named Admins, if you do not already have an admin group.
2. Add your own account and all other HelloID administrator accounts to the admin group. 
3. Go to the Roles - Overview in Security > Roles.
4. Click the Groups link for the ElasticRead role and add the admin group.
   
5. Click the Groups link for the ElasticWrite role and add the admin group.
   
6. Log out and back into HelloID. You will now have access to the Elastic Reports overview.

Grant Elastic access to other users

To grant Elastic access to other users on a one-off basis, use the Users links for the ElasticRead and ElasticWrite roles in Security > Roles.

After logging out and back into HelloID, users will now have access to the Elastic Reports overview.

Grant Elastic access to groups

To grant Elastic access to entire user groups, use the Groups links for the ElasticRead and ElasticWrite roles in Security > Roles.

For example, you might add your entire IT group to the ElasticRead group.

After logging out and back into HelloID, users will now have access to the Elastic Reports overview.

NOTE: If your HelloID environment was created prior to April 2021, it may contain Elastic_Reports_Read and Elastic_Reports_Write groups. These groups were previously used to grant Elastic access, but are now deprecated. The correct way to grant Elastic access is by adding users and/or groups to the ElasticRead and ElasticWrite roles.  If these two groups exist in your HelloID environment, we recommend removing all users and/or other groups from them, adding those users and/or groups to the corresponding ElasticRead and ElasticWrite roles, and deleting the groups.

Report spaces

Required: Grant group access to report spaces

After granting access to Elastic reporting as a whole, you must also grant access to individual report spaces. A space is a collection of reports. Each space can contain one or more reports, and each report belongs to at least one space. You grant access on a per-group basis (e.g., IT). 

NOTE: All involved groups must be in the ElasticRead role as described in the above section, Grant Elastic access to groups.

By default, your HelloID environment has one space per module included in your subscription (Access Management, Service Automation, Provisioning). These include a variety of pre-built reports.

1. Go to Security > Report > Permissions.
   
2. Select the space's Manage Groups link.
   
3. Select the Add Groups button.
4. Search for the group to which you want to grant access, and select its Read Only button. Alternatively, to revoke a group's access, select its Off button. (The Read-Write option is also available for custom spaces. See Create a custom report space, below.)
   
5. Recommended: Add your Admins group to the space.
   
6. Select the Save button.
7. Access to the space has now been granted to the selected groups.
   
8. Select the X button to close the dialog box.

Create a custom report space

Create custom spaces to organize & control access to custom reports.

1. Go to Security > Report > Permissions.
   
2. Select the Create Space button.
3. Enter a Name and select the Create button.
   
4. The new report space is added.
   
5. Grant one or more groups access to the new space, as described in the above section, Grant group access to report spaces.
6. After logging out and back into HelloID, users will now see the space in the Elastic Reports overview.
7. Create custom reports in the new report space.

Delete a custom report space

Note: You can only delete custom spaces that you've added. You cannot delete default spaces (Access Management, Service Automation, Provisioning).

1. Go to Security > Report > Permissions.
   
2. Select the Delete link for the relevant space. Warning: This also deletes all custom reports that you have created in this space.
3. Select the OK button in the dialog box.
   
4. The custom space and its reports are deleted.