Report Author Role and Permissions

As of Order Management Release 4.1.20, access to the reporting database is managed by assigning the Report Author role to individual user accounts. When an administrator assigns this role to a user account, a reporting database username is automatically generated and associated with the account. This lets the user access reports when logged into Order Management normally. To create reports, users log into the reporting database using the generated reporting database username and their normal Order Management password.

The generated username for logging into the reporting database takes the form of up to the first 17 characters of the Order Management username, followed by a random 2-digit number, followed by either a “P” for Production instance or “S” for Stage instance. Any special characters in the Order Management username are replaced with an underscore (_). Special characters might include: / []:;|=,+?<>@.*" This username appears on the user account detail page in Order Management. The password associated to this database user account is the same as the one used to access Order Management. If the Order Management password is changed, it might take up to 30 miutes for the new password to sync up with the Report Services authentication.

Note: The generated reporting database account might take up to 30 minutes from the application of the Report Author role to the Order Management account.

In order to meet PCI compliance requirements, any existing shared accounts that access the Reporting database must be replaced with individual user accounts. Going forward, only individual user accounts can be created with access to the Reporting database. In addition, the following password rules are enforced for any account with access to the Reporting database:

Passwords must be at least eight (8) characters in length
Passwords must include at least one of each of the following:
- Uppercase letter
- Lowercase letter
- Number
- Special character
Passwords expire every 90 days
The most recent eight (8) passwords can't be re-used

Roles and user accounts are created in Order Management Administration: Security > Users. See Managing User Accounts and Roles for detailed information on creating and searching for roles and user accounts, as well as the permissions included in each role.

Note: If you are using Account Manager to manage your Order Management user accounts, you still manage reporting database accounts in Order Management, not Account Manager.

The permissions in the following table are relevant to a Report Author role.

Order Management includes a default Report Author role that has the permissions checked in the second column.

Description of role permissions	Default Report Author role
Public Permission Set
Login Administration
Access Reporting Module
Customer Edit Password Reset Enabled
Report Authoring