We see significant value in Live Analytics and would like to make those insights available to a wider audience. Separating Analytics from Reports permissions would allow organizations to benefit from analytics-driven decision-making while maintaining compliance with internal data access and export policies.

Problem Statement

Currently, granting an administrator access to the Reports module also automatically grants access to the Analytics module. These permissions cannot be managed independently.

For organizations with strict data governance and compliance policies, this creates a challenge because traditional Reports functionality typically includes the ability to export and download data, whereas Analytics (particularly Live Analytics) provides valuable insights without exposing downloadable datasets.

As a result, organizations are forced to choose between:

• Denying users access to Analytics altogether, or
• Granting access to Reports and associated data export capabilities that violate internal policies.

Current Limitation

The current permission model combines:

• Reports
• Analytics / Live Analytics

under a single access permission.

This prevents administrators from granting users access to dashboards and analytics while restricting access to downloadable reports and underlying datasets.

Business Impact

Organizations cannot align permissions with internal data governance policies.
Valuable Analytics functionality remains inaccessible to many users who could otherwise benefit from it.

Increased security and compliance concerns due to unnecessary access to downloadable data.

Additional administrative overhead to control who can access reporting features.

Reduced adoption of Analytics capabilities despite strong customer demand.
Customer Use Case

The customer would like department managers and operational users to access Live Analytics dashboards to monitor workplace activity and utilization trends.

However, company policy prohibits these users from downloading or exporting data.

Because Reports and Analytics are linked under a single permission, the customer cannot provide Analytics access without also providing Report access, making deployment of Analytics impossible within their governance framework.

Suggested Enhancement

Split the existing permission into two separate administrative access controls:

• Reports

  • Access to Reports module
  • Create/edit reports
  • Export/download report data
  • Access underlying report datasets

• Analytics

  • Access to Analytics dashboards
  • Access to Live Analytics
  • View insights and visualizations
  • No export/download permissions unless explicitly granted elsewhere

Benefits

• Better alignment with enterprise security and compliance requirements.
• Supports least-privilege access principles.
• Increased adoption of Live Analytics capabilities.
• Greater flexibility for administrators managing user permissions.
• Reduces risk of unauthorized data exports.
• Enables organizations to safely expose insights without exposing raw data.