Find a particular word or phrase by searching all the data on the Roles page

A specific role with its permissions. You can click on a role to do various actions.

Create a new custom role.

In Finout, click on your username at the top right of the console and then select Admin Portal.
The account profile appears.
​

Click Roles.
You are brought to the Roles page.
​Note: This page is only accessible by Admins.
​

Click Create New Role.
The Create Role pop-up appears.
​

Add a role name and description.

Optionally toggle on Default role.
​This allows an Admin to assign any new user this default role by clicking the Copy invite link while inviting a new user. See Inviting a User.

Click Next.
You are brought to the Choose permissions step.
​

Include or exclude permissions to customize your new role and click Create Role. See the list of permissions.
Your new role is created and appears on the Roles page.

The role name with the number of permissions assigned to this specific role.

View all the permissions assigned to this role.

Edit your role name and description and add a default role.

Delete a specific role.

Include or exclude permissions from your custom role.

Click Manage Permissions.
The Manage role permissions pop-up for the role appears.
​

Include or exclude permissions to your role and click Save.
The permissions for the role are changed.

Click and then click Edit Role Details.
The Edit Role Details pop-up appears.
​

Change the Role Name and Description.

Default role - You can optionally:
Toggle on - Toggle this role on to make it a default role.
Toggle off - Toggle this role off if it was previously chosen as the default role and you do not want it to be the default anymore.
​Note: A default role allows an Admin to assign any new user this default role by clicking the Copy invite link while inviting a new user. See Inviting a User.

Click Save.
The role details are changed.

In the Roles view, click and then click Delete Role.
The Delete Role pop-up appears.
​

Click Delete Role.
The role is deleted, and all users and groups assigned to this role will no longer have it.
Users will have read-only permissions for all platform tabs and can only view the Profile tab in the Admin Portal.

Search all the data on the User's page for a specific text.

View all the information for a single user.

Invite a user and define its roles.

Edit the roles of this specific user.

Resend an invitation email to this specific user.

Delete a specific user.

In Finout, click on your username at the top right of the console and then select Admin Portal.
The account profile appears.
​

Click Users.
You are brought to the Users page.
​

Click Invite User.
The Invite User window appears.
​

Proceed with one of the following two options:

In Finout, click on your username at the top right of the console and then select Admin Portal.
The account profile appears.
​

Click Users.
You are brought to the Users page.
​

Click and then click Edit Roles.
The Edit Roles pop-up appears.
​

To edit a role, you can:

Click Update.
Your user’s roles are updated.

Log in to Finout as an Admin user.

Navigate to Settings.

Select the Groups tab.

Select or deselect Allow data access in my organization.

Click Continue. Once enabled, you can start creating groups and applying filters to them. See How to Edit Data Access.

Log in to Finout as an Admin user.

Navigate to Settings.

Select the Groups tab.

Choose Create Group.

Input a suitable Group Name.

(Optional) Define the Group Role, e.g., Admin.

Each user in a group inherits the role assigned to that group. A user's permissions are then a union of both their role and the group's role they are a part of.

(Optional) Provide a brief Group Description.

Add individual group members or input a group using the SAML Group mapping. Repeat this process for each user or SAML group you want to include in the group.

Notes:

​

Once done, click Create to finalize the group setup.

Log in to Finout as an Admin user.

Navigate to Settings.

Select the Groups tab.

Click on (⋮) next to the desired group and select Edit Group.

In the Data Access tab, activate the Data access status. This action will enable data access for this group.
​

Customize the group data by choosing the cost filter options for the group:

(Optional) Click Add new filter if you wish to add additional filter criteria.

Click Save to apply the changes.

Log in to Finout as an Admin user.

Navigate to Settings.

Select the Groups tab.

Click on (⋮) option and choose Delete Group.

Click Continue to delete the group.

Log in to Finout as an Admin user.

Navigate to Settings.

Select the Groups tab.

Click on (⋮) and select Edit Group.

Navigate to the Users & SAML Mapping tab.

To add users to the group, select the new users from the drop-down under Select group member.

To remove a member from this group, click on (⋮) and select Remove user.

In the Users and SAML mapping tab, use the free text option to input the desired SAML mapping and click + ADD.
​

The added SAML group will be displayed in a table under the SAML group tab. Note: A numeric indication next to the group name indicates the number of groups added.
​

To add more SAML groups, simply repeat step 5 for each group.
​

To remove a SAMK mapping group, click the three dots and select Remove SAML group.

Log in to Finout as an Admin user.

Navigate to Settings.

Select the Groups tab.

Click on (⋮) and select Edit Group.

Select the Group settings tab.

In the Group settings, you have the option to edit the group name, role, and description.

What is the significance of having an admin role in terms of data access?

Admin roles do not automatically grant universal data access. An admin who is not part of any group will not have access to any data. In Finout’s RBAC system, being part of specific groups determines access to data, not just the role title itself.

How can I set up a user or group to have access to all data within Finout?
​

To ensure a user or group has access to all data, they must be included in every relevant group. Alternatively, you can create a group with Discretionary Access Control (DAC) rules that explicitly grant access to every organizational unit or dataset you wish to include, ensuring comprehensive access.

Is it possible to have an “admin” group that sees everything? How does it work?

Yes, you can create an “admin” group with comprehensive access by ensuring it’s part of every necessary group or by setting DAC rules that grant access to all organizational units or datasets. This setup will allow the admin group to see everything across the platform.

Can we set up a read-only group that has access to all data?

Similar to creating an admin group with full access, a read-only group can be established by ensuring it has DAC rules for every organizational unit or dataset. This setup would grant read-only access to all data across the platform to members of this group.

Who has access to dashboards in Finout, and how is data visibility controlled?

In Finout, all users have access to all dashboards, as the platform does not yet support Access Control Lists (ACL) for dashboard accessibility. However, the visibility of data within these dashboards is governed by data access permissions tied to the groups a user is part of. This ensures that while users can view any dashboard, the data displayed is filtered according to their group memberships and the specific permissions those groups have.

Can read-only users modify dashboards in Finout?

No, read-only users cannot edit dashboards in Finout. While they have access to view all dashboards, their permissions are limited to viewing data only. This restriction is in place to prevent unauthorized modifications to dashboards, ensuring that only users with the appropriate permissions can make changes.
​

If a user belongs to multiple SAML groups that have corresponding groups in Finout, will Finout assign the user to all of these matching groups?

Yes, if a user belongs to multiple SAML groups that have corresponding groups in Finout, Finout will assign the user to all of these matching groups.
​