This article only applies to Squared Up Version 2.0. If you're looking for help with Squared Up Version 3.0, please visit our new knowledge base

By default, only SCOM administrators have permissions to manage dashboards in Squared Up. You can extend these permissions to other users to allow them to manage their own dashboards. 


These 3 permissions can be given to non-admin users to allow them to create and edit dashboards. These permissions will give users the + plus button on the Squared Up navigation bar.  We recommend you allocate all three of these permissions together:

create-view - Create new draft dashboards using the + icon in the navigation bar.

edit-view - Modify existing dashboards (create a private draft revision)

publish-view - Publish new dashboards or modified dashboards to everyone. This is also includes adding links to the navigation bar and creating drilldown dashboards.


This permission can be given in addition to the 3 above to allow users to make individual dashboards available as Open Access dashboards.

Publish-oa-view - Publish dashboards as Open Access. See Open Access Dashboards for more information.


These permissions can be assigned to specific users, or to an Active Directory group using Squared Up user profiles. User profiles are also used to customise the navigation bar based on a users role. See How to configure role-based navigation bars.


User profiles

The user profiles are stored on the Squared Up web server in the following directory:

C:\inetpub\wwwroot\SquaredUpv2\UserProfiles

In this directory you will see a file called default.xml. This is the default user profile, it is important, do not delete it. You may also see files called <domain>.<username>.xml. These are the user-specific profiles. User-specific profiles contain user preferences (such as favourite metrics) and are automatically created when users first make changes to their preferences.

To edit an existing profile

Replace <Permissions/> with the permissions you with to give the user or group, for example:

<Permission>create-view</Permission>

<Permission>edit-view</Permission>

<Permission>publish-view</Permission>

<Permission>publish-oa-view</Permission>


We recommend you keep all three of the create-view, edit-view and publish-view permissions.  The publish-oa-view permission is an optional extra.


To create a specific user profile

In the UserProfiles directory, create a new file called <domain>.<username>.xml where <domain> and <username> are replaced with the appropriate user details. For example, a profile for the user CORP\Alice would be called 'CORP.Alice.xml'.

Add the following content to the new XML file:

 

<?xml version="1.0" encoding="utf-8"?>

<UserProfile>

 <Permissions>

  <Permission>create-view</Permission>

  <Permission>edit-view</Permission>

  <Permission>publish-view</Permission>

  <Permission>publish-oa-view</Permission>

 </Permissions>

</UserProfile>

You may wish to remove the publish-oa-view permission, but if you need the user to be able to create/edit dashboards we recommend you keep all three of the create-view, edit-view and publish-view permissions.


To create a new group profile

1. Create a new file in the UserProfiles directory C:\inetpub\wwwroot\SquaredUpv2\UserProfiles

2. A Group Profile should use the format group.<domain>.<groupname>.xml


Where <domain> is your domain as shown in IIS:


And <groupname>matches the name of the Active Directory group exactly.


For example, for the group mydomain\SQL DBAs in Active Directory Users and Computers:



The xml group profile would be named:

group.mydomain.SQL DBAs.xml


The file name you give the group profile xml file here is important and must use the format group.<domain>.<group name>.xml described or the group will not receive the permissions.


3. Add the following content to the new XML file:

  

<?xml version="1.0" encoding="utf-8"?>

<UserProfile>

 <Permissions>

  <Permission>create-view</Permission>

  <Permission>edit-view</Permission>

  <Permission>publish-view</Permission>

  <Permission>publish-oa-view</Permission>

 </Permissions>

</UserProfile>


Once this file is created the group name will also appear in the 'users' drop-down box under 'Everyone', when publishing a dashboard or editing the navigation bar.  See How to configure role-based navigation bars

Why are my group profiles not appearing in the Edit Navigation Bar users dropdown list?

The group profile xml file name structure is important, check that is is formatted correctly with the correct domain name and group name as it is shown in Active Directory Users and Computers: group.<domain>.<group name>.xml

Why do some users not have the 'more' menu button on the navigation bar?

Only SCOM Admins get the 'more' button on the navigation bar. Users with other SCOM roles can be given permissions to create dashboards by following this article, and this gives them the + plus button on the navigation bar, but not the more button.


Related Articles


The Dashboard Designer - The Quick Start Guide

How to configure role-based navigation bars

How to create menus and submenus on the navigation bar

HTTP 500 error when clicking + to create a new dashboard

How to set default user preferences

Open Access Dashboards

How to check and edit SCOM User Roles