User groups can be created to assign specific rules and permissions to a set of users. These user access groups help in creating sets of access rules for specific elements.
Adding and editing user groups
Creating a user group allows you to assign even more granular permissions than the By Scorecard user type. With user groups, you can set permissions as granular as restricting access by report or by detail page.
User groups can be helpful if you know that there are a set of users that will always have the same permissions no matter what is added to your account.
An example of when this could be useful is when you have a department or team that will all have the same permissions throughout the account.
From the Control Panel click on System Settings
Select Manage Groups under Users and Groups
Click the Plus icon
Under Group Name, enter the name of the new group, in this example, ‘User Access Group’.
Click on Add Access Rule
A new window will appear, select the appropriate Scorecard, Element type, and Access Level
Repeat these steps to add as many Access rules as necessary
Once you are done with your configuration, click Save
🚨 Important: Order of Access Rules Matters
ClearPoint evaluates access rules from top to bottom, and the last applicable rule takes precedence.
To ensure your restrictions work correctly, always list broad access rules first (like “Browser of [Scorecard]”), followed by more specific restrictions (like “No Access to Measure X”).
If a "Browser" rule is listed after a "No Access" rule, it can override that restriction and unintentionally grant access.
✅ Example (Works as Intended):
Browser of 🛫 Upward Airlines Corporate
No Access to Measure “Revenue” of 🛫 Upward Airlines Corporate
No Access to Measure “Expenses” of 🛫 Upward Airlines Corporate
No Access to Measure “Net Profit” of 🛫 Upward Airlines Corporate
❌ Example (Does NOT Work):
No Access to Measure “Revenue” of 🛫 Upward Airlines Corporate
Browser of 🛫 Upward Airlines Corporate
In the incorrect order, the broader "Browser" rule applies after the restrictions, which grants access back to those measures.
In the Reports tab, select the Restricted Access summary reports this group will be able to access.
In the Templates tab, select the Restricted Access briefing book templates this group will be able to access.
In the Scorecards tab, select which scorecards will be hidden from this group. If your organization has lots of scorecards, checking them off here may be a faster option than creating a ‘No Access’ rule for each.
In the Users tab, you will select users to assign to this group. You can also specify which groups a user should have access to by editing individual users. For more information on assigning users to groups, please see the section below.
Once you are done with your configuration, click Save
Assigning users to a user group
From the Control Panel click on System Settings
Select Manage Users under Users and Groups
Click the edit Pencil icon next to the user you want to add
Select Assign Group under User Type
Navigate to the Access Group tab
Check the box next to all access groups this user should be a part of
Once you are done with your configuration, click Save
