How can I create a user-centric report for users at the group-permission level?
RespondidaWe have a self-assessment model with about 600 users in our database across 120 audit programs (about 1,900 controls tested each quarter).
We have a number of individuals who are in oversight positions that would like to monitor progress each quarter and I believe the best way to do it would be through a user-centric report that is driven off the "Group" permissions.
Our permissions are set up in a way so that each audit program (location) contains only the users performing the self-tests, management, external audit, and the Internal Audit team.
Associate X oversees 10 different audit programs and is not assigned as a tester/reviewer for any controls. We would like Associate X to be able to open this report and see all locations/controls, and their status at any given time.
Any help is appreciated!
We have a number of individuals who are in oversight positions that would like to monitor progress each quarter and I believe the best way to do it would be through a user-centric report that is driven off the "Group" permissions.
Our permissions are set up in a way so that each audit program (location) contains only the users performing the self-tests, management, external audit, and the Internal Audit team.
Associate X oversees 10 different audit programs and is not assigned as a tester/reviewer for any controls. We would like Associate X to be able to open this report and see all locations/controls, and their status at any given time.
Any help is appreciated!
0
-
The best way to handle that today would be to add a new Control Stakeholder Type and call it "Oversight" (or something that makes more sense) and add those users as control stakeholders.
Then, if you already have a user-centric report for controls (typically called "My Controls" or something like that) you can just give permissions to that report to your oversight group and they will be able to see the controls they oversee.
Right now user-centric reports are keyed directly off the currently logged in user, but we've definitely had some discussions on how we can make it a little easier to work with groups in the future.
To get help making a new Control Stakeholder Type or if you need tweaks to your user-centric reports to work with this idea just contact your CSM.
Thanks for the question!0
Update as of 2026: The approach of creating a custom Oversight Stakeholder Type and adding users to relevant controls remains the best solution. Additionally, you can now add an oversight group directly as a collaborator on a report for broad view access. For accounts using Form Permissions, rule-based conditional access provides even more flexibility — reach out to your CSM/PSM for setup assistance!
0Por favor, entrar para comentar.
Comentários
2 comentários