Published at: 2026-09-17
Menu and chart operation permissions
This document is for CRM admins and report admins. It covers how administrators configure every permission type on the BI platform. Each section is self-contained, so you can read only what you need.
Menu and Chart Operation Permissions (Functional Permissions)
Overview
With functional permission control, admins can finely manage the operating boundaries of different roles in BI. From menu entry points to chart-level operations, the layered permission system keeps data secure while giving each role exactly the analytical capabilities it needs.
Permission Chain
Role
└→ Subject domain permissions (view/create/edit/delete/export/subscribe/share/forward)
└→ Chart-level permissions (public: visible to everyone; private: visible to a specified scope)
└→ Effective operation scope = subject domain permissions ∩ chart-level permissions
Core Concepts
| Concept | Definition |
|---|---|
| Subject domain permission | Coarse-grained permission configured through roles. Determines the maximum range of operations a user has in a subject domain |
| Chart-level permission | Fine-grained access control applied to an individual chart on top of subject domain permissions |
| System preset report | Out-of-the-box charts preset by the system, visible to all employees |
| Statistical Indicator Management | A dedicated module for managing chart subjects and indicators |
Before You Begin
[!IMPORTANT] - Role permissions: You need CRM admin permissions. - Scope of impact: Permission changes take effect immediately for all users in the role. - Completion Conditions: The target role has been created.
Configure Subject Domain Permissions
Subject domain permissions are configured through roles and determine the operations users can perform in a subject domain.
- Go to Setup > Role Permission Management > Manage Functional Permissions.
- Select the target role.
- In the subject domain categories, find the subject domain to configure.
- Select the operation permissions you need: - View: View charts under this subject domain. - New: Create charts under this subject domain. - Edit: Edit charts under this subject domain. - Delete: Delete charts under this subject domain. - Export: Export chart data under this subject domain. - Subscribe: Subscribe to charts under this subject domain. - Post: Share charts under this subject domain. - Forward: Forward charts under this subject domain.
- Click Save.
[!NOTE] Subject domain permissions are coarse-grained. To control an individual chart precisely, configure chart-level permissions.
System Preset Report Subject Domain
The system preset report subject domain controls operation permissions for all preset charts. Preset charts are out-of-the-box charts provided by the system, visible to all employees.
| Role | Permission Description |
|---|---|
| CRM admin, report admin | Has all permissions: view, edit, delete, forward, export, and share |
| Non-admin roles | Has view permission by default. Edit, delete, forward, export, and share permissions can be configured in the role |
[!NOTE] Editing a preset chart means saving it as a personal chart. Deleting means deleting a personal chart created by saving a preset chart as.
Configure Chart-Level Permissions
On top of subject domain permissions, you can control an individual chart more precisely.
Set View Permissions
- On the chart edit or detail page, find the permission settings area.
- Choose a view permission type: - Public: Visible to everyone with permission on this subject domain. - Private: Visible only to the specified personnel, departments, department heads, user groups, or roles.
- If you choose Private, select the target objects in the scope selector.
- Save the settings.
Set Operation Permissions
| Permission | Description |
|---|---|
| Edit | Edit this chart. Available only to the selected scope |
| Delete | Delete this chart. Available only to the selected scope |
| Export | Export this chart. Available only to the selected scope |
| Subscribe | Subscribe to this chart. Available only to the selected scope |
| Post | Share this chart. Available only to the selected scope |
| Forward | Forward this chart. Available only to the selected scope |
[!WARNING] Chart-level permissions take effect on top of subject domain permissions. Chart-level permissions are a subset of subject domain permissions and cannot exceed the permissions assigned at the subject domain level.
Configure Statistical Indicator Management Permissions
Statistical Indicator Management permissions control operations on chart subjects and indicators.
| Permission | Description |
|---|---|
| View | See the Statistical Indicator Management entry on the report list page and view all subjects and indicators |
| New | Create any subject and indicator. When selected, View is selected automatically |
| Edit | Edit all subjects and indicators |
| Delete | Delete any subject and indicator. When selected, View and Disable are selected automatically |
| Enable | Enable subjects and indicators |
| Disable | Disable subjects and indicators |
[!TIP] With View permission, you can view unused indicators on the Statistical Indicator Management page. With Disable permission, you can disable indicators on the unused indicators page. With both Disable and Delete permissions, you can disable and delete indicators on the unused indicators page.
How to Verify
- Log in to CRM as a user with the target role.
- Confirm that report menu visibility matches expectations.
- Open each subject domain and verify that chart operation permissions are correct.
- Test the effect of chart-level private permissions.
Notes
- Menu visibility is computed automatically from permissions. No separate configuration is needed.
- Chart-level permissions cannot exceed the subject domain permission scope.
- Permission changes take effect immediately. No re-login is required.