iServer Express supports simple and complex security models, enabling organizations to ensure that users access only the reports and data they are allowed to see. iServer Express has its own security model to manage user logins stand-alone, but when an existing security infrastructure exists, iServer Express offers multiple ways to access those systems to support single sign-on (SSO).
Hierarchical-based User Security
iServer Express offers hierarchal role-based security with multi-level access permissions which, when used together, provide multiple approaches for granular control over user access.
- User-based Security - access levels are determined by unique privileges assigned to the individual.
- Role-based Security - access levels are determined by the functional or hierarchical role a person has in the organization, such as their specific job or management level.
Controlled Report and Data Access
iServer Express provides granular user access to reports, functions and data.
- Report Access Security - permissions determine which reports users are able to access.
- Data Access Security - permissions determine the data that can be included in the reports users access.
- Functional Access Security - permissions determine if users can create, generate or just view reports and if they are able to administer the server.
- Report Component Access Security - add-on products exist that offer more granular security; for example, e.Spreadsheet reports can control sheet-, row- and column-level access rendering a single report into custom reports for each user.
Multiple Secure Sign-on Options
iServer Express security can be implemented stand-alone or through integration with external directory services such as LDAP and Active Directory.
- Stand-alone - user names and roles are stored in iServer Express, with direct user log-in to iServer Express.
- Individual Privileges plus Single Sign-On (SSO) - user names and roles are stored in iServer Express, with invisible log-in to iServer Express handled by external SSO.
- External privileges plus SSO - user names and roles are not stored on iServer Express, with invisible log-in to iServer Express handled by external SSO.