Skip to main content

Dynamic Report Permissions and Settings

Configure company settings and user permissions for ProcessPro's Dynamic Report Builder, including AllowReportBuilder, AddDynamicReport, and report types.

Written by James Ross

Dynamic Report Permissions and Settings

Description

ProcessPro's Dynamic Report Builder uses a combination of company-level settings and user-level permissions to control access. This article explains each setting and permission, how they interact, and how to configure them for your organisation.

Why Configure Permissions?

Not every user needs to create reports, and not every company needs the Report Builder enabled. Permissions and settings let you control who can create, view, edit, and delete Dynamic Reports, ensuring the feature is available to the right people.

Restrictions

  • The AllowReportBuilder company setting is the master switch — when disabled, all Report Builder endpoints return 403 Forbidden

  • The AddDynamicReport permission only controls the Add button visibility — it does not affect viewing, editing, or deleting

  • Other actions (view, edit, delete) are controlled by the AllowReportBuilder company setting

Quick Steps

Company Settings

AllowReportBuilder (Master Switch)

  • This is the master switch for the entire Dynamic Report Builder feature

  • When enabled, users can access the Report Builder (subject to individual permissions)

  • When disabled, the RequireReportBuilder attribute returns a 403 ForbidResult on all Report Builder endpoints

  • Must be enabled by a company admin

AllowPublishedDynamicReportAccess

  • A separate attribute that can allow access to published reports even when AllowReportBuilder is disabled

  • Useful for organisations that want to share published reports with users who shouldn't have access to the full Report Builder

User Permissions

AddDynamicReport

  • Controls the EnableCreate flag — determines whether the Add button is visible in the Report Builder summary

  • This permission is standalone and independent of other permissions

  • Users without this permission can still view, interact with, and export existing reports (if AllowReportBuilder is enabled)

Report Types

Plan Reports

  • Plan reports include a goal hierarchy indentation feature via ShowGoalHierarchyIndent

  • When enabled, goals display outline numbers (1, 1.1, 1.1.1) and indent depth reflecting their hierarchy

  • Rows link to the plan details page at /plan/details/{PlanId}#{GoalId}

  • Available palette columns: Title, PlanTitle, Owner, Progress, Status, UpdatedAt, UpdatedBy, FocusAreaTitle, FocusAreaDescription, DueDate, StartDate, GoalTemplate, TrackingOption, BaselineValue, TargetValue, plus goal template dynamic form fields

Form Submission Reports

  • Rows link to the submission review page at /form/review/{submissionId}

  • Available palette columns: FormTitle, SubmittedAt, SubmittedBy, Status, plus dynamic form field names from form definitions

Snapshot Reports

  • Snapshot reports are independent of the AllowReportBuilder setting

  • They work without AllowReportBuilder being enabled

Pagination Settings

  • EnablePagination toggle controls how report data is displayed

  • When enabled (true): report uses paged DataTables with page controls

  • When disabled (false, the default): all rows load in a single list

  • Save pagination settings via POST /reportbuilder/SaveDetails

Important Notes

The AllowReportBuilder company setting is the master switch. When disabled, no user can access any Report Builder endpoint — the RequireReportBuilder attribute returns 403 Forbidden on all routes.

The AddDynamicReport permission is independent of all other permissions. Granting or revoking it has no effect on viewing, editing, or deleting capabilities — it only controls the Add button.

AllowPublishedDynamicReportAccess is a powerful override. It allows users to view published Dynamic Reports even when AllowReportBuilder is disabled, enabling a "view-only" distribution model for your organisation.

Snapshot reports operate independently and do not require AllowReportBuilder to be enabled. This makes them useful for capturing point-in-time data regardless of the Report Builder configuration.

Further Information

Did this answer your question?