10 minute readApplies to: v3

How to manage user profiles

By default any user logging into Squared Up has access to view dashboards, but only SCOM admins can create dashboards and perform other administrative tasks.

User profiles allow you to grant users (either on an individual or Active Directory group basis) the ability to create and edit dashboards, manage dashboard packs, and even manage Squared Up itself.

User profiles also give you a mechanism to customise the navigation bar, so that users receive a different navigation experience depending upon their profile.

Overview

User profiles can be assigned either directly to a user, or constructed from their Active Directory (AD) group membership. A user's final permissions are based on the sum of all groups and directly assigned permissions.

Managing user profiles via Squared Up is only available in v3.1 or later. See the Release Notes for further information on maintenance and feature releases.

You may also like to take a look at the Squared Up webinar 'Role-Based Profiles and Navigation':

Permissions

How to control who can create/edit dashboards

By default only users who are SCOM administrators can create or edit dashboards in Squared Up. This article describes how you can allow non-SCOM Admin users to create dashboards and customize the navigation bar by creating a "Dashboard Authors" role using user profiles and AD groups.

  1. Create an AD group such as Dashboard Authors and add any Squared Up users who you wish to be able to create and edit dashboards to the group.

  2. In Squared Up click on the right-hand menu ☰ > system > profiles

  3. Click the add button.

  4. Type the domain and name of the AD group, and ensure group is selected under type.

    Completed add group profile dialog

  5. Click on add, then ensure the AD group is selected in the Choose profile dropdown.

    Group selected on user profiles page

  6. Under Permissions, enable the following settings (you can do this quickly by clicking enable all under the Authoring heading):

    Authoring permissions on user profiles page

    If the user does not have the edit-this-navigation, edit-owned-navigation or edit-profiles permission they will be able to publish a dashboard, but it will only appear on the navigation bar under the more menu.

  7. Log out of Squared Up and log in as a user in your dashboard authors group. You should see the + button on the navigation bar, and should be able to edit an existing dashboard and publish a draft.

How to make users Squared Up Admins without granting SCOM Admin permissions

Initially only users who are SCOM administrators can perform administrative functions in Squared Up, such as modifying user permissions, changing global configuration settings or managing licenses. We can however create a "Squared Up Admins" role using user profiles and AD groups, and then grant users the ability to manage Squared Up.

  1. Create an AD group such as Squared Up Admins and add any Squared Up users whom you wish to be treated as admins to the group.

  2. In Squared Up click on the right-hand menu ☰ > system > profiles

  3. Click the add button.

  4. Type the domain and name of the group, and ensure group is selected under type.

  5. Click on add, then ensure the group is selected in the Choose profile dropdown.

  6. Under Permissions, enable the following settings:

    Admin permissions on user profiles page

    You can also grant these users all Authoring permissions if they do not already have them via another group.

    Regardless of the options you choose here, SCOM admins always have all permissions enabled.

  7. Log out of Squared Up and log in as a user in your newly created admin group. You should be able to see all the tabs in the system screen and manage all options.

Available Permissions

Authoring

These permissions are all related to the creation, modification and publishing of dashboards and perspectives. They are generally safe to provide to trusted end users.

Permission Typical Roles Description
create-dashboard Dashboard Author Create new draft dashboards.
edit-dashboard Dashboard Author Edit existing dashboards . Without the publish-dashboard permission any changes made will be private and only visible in the draft.
publish-dashboard Dashboard Author Publish a dashboard so other users can view it. Without the edit-this-navigation or edit-owned-navigation the dashboard cannot be added to the navigation bar.
delete-dashboard Dashboard Author Delete a draft dashboard. Published dashboards must be unpublished first before they can be deleted.
unpublish-dashboard Dashboard Author Unpublish a dashboard. You must have delete-dashboard to completely remove it.
create-perspective Advanced Author Create new draft perspectives.
edit-perspective Advanced Author Edit existing perspectives. Without the publish-perspective permission any changes made will be private and only visible in the draft.
publish-perspective Advanced Author Publish a perspective so any user can view it.
delete-perspective Advanced Author Delete a draft perspective. Published perspectives must be unpublished first before they can be deleted.
unpublish-perspective Advanced Author Unpublish a perspective. You must have delete-perspective to completely remove it.

Advanced Authoring

These permissions should only be granted to trusted users, as they either allow for the modification of navigation bars (which may impact the usability of Squared Up) or the ability to run arbitrary SQL queries as the Squared Up application pool identity.

Permission Typical Roles Description
construct-sensitive-queries Advanced Author, Trusted User Create and edit tiles with sensitive queries, e.g. SQL queries. Should only be granted to users who can be trusted to construct and edit arbitrary queries against external systems.
edit-this-navigation Dashboard Author Allows members of this profile to edit the navigation bar of this profile.
edit-owned-navigation Trusted User, Advanced Author Edit the navigation bar for any profile of which the user is a member.

Administration

These permissions should only ever be granted to the Squared Up administration team as they govern licensing, connectivity to external systems and permissions.

Permission Typical Roles Description
import-pack Advanced Author, Squared Up Admin Import a Dashboard Pack.
export-pack Squared Up Admin Export a Dashboard Pack.
delete-pack Squared Up Admin Delete a dashboard pack.
edit-pack-contents Squared Up Admin Edit contents of dashboard packs.
edit-profiles Squared Up Admin Edit and create user profiles. This includes their own profile.
edit-webapi-settings Squared Up Admin Edit Web API settings, add and remove providers.
edit-connection-settings Squared Up Admin Edit connect settings, e.g. SCOM, OMS.
edit-vada-settings Squared Up Admin Edit VADA configuration settings, e.g. global filters.
manage-notifications Squared Up Admin View and dismiss system notifications.
manage-licensing Squared Up Admin Manage licensing, e.g. activation key, named users.
manage-open-access Squared Up Admin Manage Open Access settings, including navigation. Without this setting users cannot publish OA dashboards.

A user with edit-profiles can modify their own permissions, allowing them to escalate their rights to a full admin if desired. For this reason we do not recommend granting this permission to anyone who does not already receive administrative rights in Squared Up.

Customizing the Navigation bar

A users navigation bar in Squared Up is dynamically built based upon all dashboards added to any profile applicable to them. This will include:

  • The Default (Everyone) profile
  • Any group profiles that the user is a member of
  • Their explicit user profile

Any published dashboards that are not added to a user's navigation bar automatically appear under the More menu (assuming the user has access to it).

In order to manage which dashboards appear on the navigation bar, you must have either the edit-this-navigation permission (to edit the particular profile that granted the permission) or edit-owned-navigation (which allows you to edit navigation bars for all your profiles).

Add dashboards to the navigation bar for a group

In this walkthrough, we are going to add a specific application dashboard onto the navigation bar for a group of users who have access to manage that application.

Create a group profile

  1. If you do not already have a suitable AD group, create one such as Application X Monitoring Users and add any Squared Up users whose navigation bar you want to include the application dashboard to the group.

  2. In Squared Up click on the right-hand menu ☰ > system > profiles

  3. Click the add button.

  4. Type the domain and name of the group, and ensure group is selected under type.

  5. Click on add, then ensure the group is selected in the Choose profile dropdown.

New Dashboard

  1. Create a dashboard as you normally would for this application.

  2. Click the Publish button in the top left of the screen.

  3. Ensure the add this dashboard to navigation bar is checked, and that your group is showing in the profile dropdown.

  4. Drag the new dashboard label onto the existing bar list so that it appears on the navigation bar in the desired order.

    Completed Add to navigation bar section of publish dialog

  5. Click Publish. If you are a member of the AD group you should see your dashboard on the navigation bar. Otherwise, log on as a user who is a member of the group, and confirm the dashboard is in the appropriate location.

Existing Dashboard

  1. In Squared Up click on the right-hand menu ☰ > system > profiles

  2. Click the add button.

  3. Ensure the group is selected in the Choose profile dropdown.

  4. Under Navigation bar click the + button.

  5. Enter the name of the existing dashboard into the Search dashboards or enter label box.

  6. Drag the dashboard to the desired location in the list, which will set the order of items in the navigation bar.

  7. If you are a member of the AD group you should see your dashboard on the navigation bar. Otherwise, log on as a user who is a member of the group, and confirm the dashboard is in the appropriate location.

Removing dashboards for users

At time of writing it is not possible to hide or remove dashboards using user profiles. The navigation bar is built from all profiles assigned to you.

You can however remove all dashboards from the Default (Everyone) profile, and then assign users only the dashboards they need (via membership in multiple groups or directly).

Ensure that all potential users who can log into Squared Up are a member of at least one group, or there is a welcome dashboard in the default profile as otherwise user experience may be very poor.

Visibility of the More menu

The More menu displays all published dashboards that have not been added to your navigation bar. The more menu is disabled by default but can be enabled for a profile by following the below steps:

  1. In Squared Up click on the right-hand menu ☰ > system > profiles

  2. Click the add button.

  3. Ensure the desired profile is selected in the Choose profile dropdown.

  4. Under Navigation bar enable the add 'more' menu to navigation bar containing all other dashboards toggle.

    More menu permission

Webinar: Role-Based Profiles and Navigation

How to configure high availability

In-product notifications

Squared Up Ltd. (c) 2018Report an issue with this article