Aware 2.0 - RBAC in Custom Reporting

This article contains information on Role-Based Access Controls (RBAC) in Spotlight’s Custom Reporting, including permissions, Data Access Sets, and steps for creating reports with restricted data visibility.

Aware has implemented Role-Based Access Controls in Spotlight’s Custom Reporting, enabling robust permissions and enhanced data visibility by allowing user access to Custom Reporting to be provisioned based on specific Data Access Sets (DAS).

Spotlight’s Role Permissions

• Manage Spotlight Data: This permission acts as an on/off toggle for the submodules Dashboard, Platform, and Groups. A Data Access Set currently does not control this. All Spotlight users will have access to the Spotlight Dashboard.
• Manage Custom Reports: This allows for creating, deleting, and re-running reports.
• View Custom Reports: This allows pre-existing reports to be viewed with the associated Data Access Set.
• A Data Access Set controls both of these permissions.

• Spotlight Admin: This role functions the same as all other admin roles, giving all permissions and full data visibility within Spotlight. It is managed on the Role page and indicated with a purple icon.

Creating a Custom Report with RBAC

As you start to build your Custom Report, a user will need to select a Data Access Set (DAS) before continuing with the workflow.

Once a Data Access Set is selected, users will go through the standard Report Builder flow.

If you choose to run an Audience Report, the Audience Type section will display based on what the Data Access Set allows.

You cannot change the Data Access Set associated with a report that has already been run.

Report Builder Audience Functionality Based on Data Access Sets

When a user is linked to a Data Access Set that exclusively includes Platform Groups, Aware will permit the user to select only the Audience Type or Platform Group. Refer to the example below:

Exclude DMs - Data Sensitivity Option

This option, which was previously located in the Advanced Options section, has been entirely removed as it will now be governed by the Data Access Set and the chosen Audience.