Users and groups can be restricted to accessing certain features of the i-net Clear Reports server. The available permissions settings depend on the activated plugins. The permissions can be edited using the Users and Groups Manager (plugin is activated by default) or using the API.

When the Restrict Permissions check is activated, only the users and/or groups with configured permissions will be able to access the features.

Important: When the restriction is deactivated, everyone can access all features, including any guest (see Login). Use permissions in the users and groups application to restrict access to important features such as the configuration manager.

• Default value: inactive

In case of disabling the Restrict Permissions check, guest users still do not have full administrative permissions, such as installing plugins. You can, however, allow even guest users the highest of all permissions using the option Administrative Permissions for Guest Account. You should consider this move prudently, since i-net Clear Reports is effectively fully unprotected against all sorts of issues, including remote code executions (RCE).

Be advised, that enabling this option is only ever useful in a closed environment, where access to i-net Clear Reports is controlled in a separate way, such as a very limited networks.

Note: It cannot be stressed enough, that this option is considered bad practice.

• Default value: inactive

In the Users and Groups application it is possible to manage users, groups and their permissions. The following options will allow users certain actions on their own accounts.

If enabled, it is possible to delete user accounts in the upper right menu of the Users and Groups application. Otherwise it is only possible to deactivate it.

• Default value: activated

If enabled, the user can deactivate its account in the "Edit my data" entry of the upper right user menu.

• Default value: activated

If enabled, the user can delete its account in the "Edit my data" entry of the upper right user menu.

• Default value: activated