New User with new Role unable to access Report page.
User is not able to create On-Demand Reports.
User does not see Report page for access to run On-Demand Reports.
User does not see Report page for access to create On-Demand Reports.
Reported against the r188.8.131.52 release
Impacts all existing releases
The Role assigned to the user has two rights assigned that conflict with each other. The result is the user is not able to see or access the Reports page to create or run On-Demand Reports.
To reproduce the issue first create a Role; assign the Role these two Performance Center based rights:
Create On-Demand Reports
The problem is triggered specifically by the Role right for Administer Tenants being assigned to the role along with the Create On-Demand Reports right. Administer Tenants is a very specialized role right. It's documentation states:
Grants users administrative rights over the tenants that are selected in the user wizard. Users with this role have the rights to administer certain tenants, but have limited access to the default tenant. This role is only used in multi-tenant environments. Tenant administration includes the ability to manage:
Users with this role right have very limited access in Default Tenant, but Administrative access to selected tenants.
Removing the Administer Tenants right from the Role and the page will become available to the users.
In the scenario where this unwanted result was observed the customer chose to remove that right from the defined Role. The users who were target to use this role are regular users that do not require Tenant Administration access. For these users Report access is more important. As an alternative, a special Role was created for a special admin user that was shared between adminstrative level users for Tenant adminstration duties alleviating the problem entirely.