Report permissions

Whether an operation on a report is allowed is determined by the workspace role, plus the report's sharing settings. Because reports are read-only, the only resource role is Viewer. For a feature overview, see Report.

Resource role

Role	Summary
Report Viewer	Can view the report

Operations and required roles

A Report Viewer can view the report. Comments can be used unless comments are disabled.

Whether SQL can be re-run, parameters edited, downloads made, and the Explorer used is determined by the publish settings (report type and options) chosen when the report was published. For the content of publish settings, see Report publish settings. Changing publish settings requires republishing.

Operation	Condition in publish settings
Re-running SQL / refreshing execution results	Refreshable report or interactive report
Editing parameters	Interactive report
Downloading source data	Downloads enabled
Using the Explorer	Explorer enabled

TIP

Unlike running SQL on a notebook, re-running SQL and getting or downloading execution results within a report don't require connection permissions. If allowed by the publish settings, a Report Viewer can run them.

Sharing targets

A report can be shared with a user or a group. Sharing grants Report Viewer.

Guest

A report can be shared with a workspace guest.

• A guest who has already joined the workspace can be shared with directly.
• If they haven't joined yet, you can invite them as a guest by specifying an email address. Once they accept the invitation, they're added to the workspace as a guest and can view the target report. For the steps, see Invitations and joining.

A guest can perform the same operations as a Report Viewer (within the scope of the publish settings). They can't access notebooks or connections.

If the workspace policy disables guest invitations to reports by Workspace Editors, only the Workspace Owner can invite guests.

Members and groups

Besides guests, a report can also be shared with members or groups. Because guests can't belong to a group, sharing with a group only reaches members.

Publishing and management operations

The permissions required to publish and manage a report are based on the edit permission of the source notebook it was published from. For the roles required to edit a notebook, see Notebook. However, notebooks in the shared scope can't be published as a report even with edit permission.

Operation	Required condition
Publishing a report / changing report permissions	Edit permission on the source notebook, and Connection User or higher for every connection used by the published pages
Deleting a report / editing report settings	Edit permission on the source notebook