Reporting Levels - Enforcing OUs or Locations

certero logo_cropped_png-01 1.png

This article is intended to help customers enforce a reporting level for a role within Certero for shared entries. This is especially useful for organizations that want to provide a filtered user experience, ensuring that users can only view and manage the devices they are responsible for upon logging in.

Instructions

To enforce reporting levels there must be some defined Organisational Units or Locations setup in your Certero platform. If you are unsure on how to do this, please refer to either of the following articles

  1. Managing Locations

  2. Managing OUs

With some defined Locations and OU’s, expose your navigation menu by clicking the hamburger icon top left. Left click Reporting Levels

The Reporting Levels modal should be displayed:

Depending on which reporting level you are enforcing, select either Organisational Units or Locations and select the desired entry. In this example, we are selecting Location London (1) which can be confirmed by the count of selected items (2)

With the desired OU/Location selected, create a ‘Shared’ view by selecting the file icon top right of the Reporting Levels modal

Within the popup window:

  1. Click the Shared button

  2. Give your shared entry a name (this can be different from the Reporting level if needed, its best practise to name this in line with the entry)

  3. Press Save and Apply

After pressing Save and Apply, you can observe the saved title name populated next to the file icon:

With a Reporting level shared, the final step is to align the shared entry to a Role within your platform. Navigate to Administration > Roles, select the desired role you want to enforce, right click Actions > Set Reporting Level, select your saved Reporting Level

Select your desired Reporting Level, tick Enforced, select OK

You can then observe your enforced reporting level against a role. The lock symbol signifies this is an enforced reporting level.

Notes:

  • Enforced levels ensure roles cannot access anything outside of the assigned reporting level

  • Both organizational units and locations can be enforced