Overview
This article addresses security concerns related to reports generated from advanced reporting, particularly in the context of user management reports.
Question
I do not have user administration rights and cannot see the Security panel; however, generating the User Management Report shows me all of the system's users and their applicable access layers. How can only users with admin rights generate reports on users?
Answer
Access layers are evaluated for entities and journeys, where they are applied. User management does not have access layers. If you have reporting permissions, you will have read-only access to all authorization data, which includes Users, Teams, and their configurations. Consequently, any user with reporting permissions can view the generated authorization reports.