ACL Permissions

Overview

Access Control List (ACL) permissions provide organizations with a more granular way to manage access to objects in Finout. This flexibility ensures that sensitive objects are accessible only to the intended audience.

Types of ACL Permissions

You can set read and write permissions as either Public, Private, and Shared. Permission for an object is granted if a user or group have a role with the proper permission and also ACL permission to access the object. By default, ACL permissions for read and write access are public, meaning users can view or modify an object if they have Role-Based Access Control (RBAC) to read or write the object.

Note: The ability to use ACL together with permissions is coming soon.

ACL Types	Description
Public	Grants access to anyone in the organization that has Role-Based Access Control (RBAC).
Private	Grants access only to admins and the user who created the object.
Shared	Grants access only to specific users or groups that have Role-Based Access Control (RBAC). Note: Admins always retain access.

Example: You want to grant a user (Team1User1) read permission to the "Q4 Marketing Costs" dashboard. You must first ensure that the user has read permissions role for the specific dashboard. In addition, you should then assign them specific read access to that individual dashboard (Public or Shared) . Without the dashboard read permission in their role, ACL permission cannot be granted.

Finout Features with ACL Permissions

• Financial Plans

• Tag Governance

• MegaBill

• Dashboards- (Coming Soon)