Skip to main content

Access Control

User Claims

Access to SFHub Studio (which includes Project), Analytics, and Dashboard and Report apps and their functions is controlled on a user-by-user basis, using 'User Claims', which work similar to assigning file access rights on a Windows PC. They allow a user to see and work with the SFHub Studio apps. User Claim rights can be assigned to each of the SFHub Studio apps separately. The access rights available for each app are much the same, with the exception of "Execute", which is not applicable to SFHub Studio itself and Projects, as neither requires an execution function.

Note

Access to SFHub Studio is required in order for a user to see and access Projects and to have access to the Analytic and Dashboard and Report apps. In addition, Analytic access and rights are required for any user who needs access and rights to Dashboard and Report functions.

The following table shows the access rights that can be applied to each SFHub Studio app.

SFHub Studio User Claims Access Chart

ClaimProjectAnalyticDashboard\/ReportDescription
ListYYYUser is able to see the list of entities.
ReadYYYUser is able to open and view/read an entity.
WriteYYYUser is able to edit an entity.
DeleteYYYUser is able to delete an entity.
ShareYYYUser is able to share an entity to Public.
CreateYYYUser is able to create a new entity.
Exec YYUser is able to execute an entity.

Access rights can be granted for SFHub Studio (includes 'Project'), which allows a user to log into SFHub Studio and work with Projects, providing that one or more of the other rights (list, read, write, etc.) are also granted to that user. If a user is given rights to only SFHub Studio, with no other rights selected, that user is able to sign into SFHub Studio, but is unable to see or work with Projects. The same holds true for the Analytic and Dashboard and Report apps in SFHub Studio; if a user is only granted access to the app and all other rights are disabled, that user is able to open the app after logging into SFHub Studio, but is unable to work in it.